VP, Senior Product Security Engineer

Overview

As Senior Product Security Engineer, you secure microservices and cloud applications within Galaxy’s fast-growing fintech and blockchain environment. You’ll assess and remediate security in trading and blockchain architectures, working with Engineering, Product, and Infrastructure to deliver secure software rapidly. Your work shapes secure design patterns and governance across the product stack, enabling trusted digital asset solutions. This role offers a meaningful impact on fintech security at scale and cross-functional collaboration.

Pay / Benefits

• Competitive base salary
• Discretionary bonus
• Company-paid health benefits
• Free virtual coaching and counseling
• Opportunities to learn about the crypto industry
• Employee Resource Groups

Responsibilities

• Participate in secure software design and code reviews
• Develop and review test plans to ensure security coverage
• Assist with remediation of findings and guidance for implementation
• Provide expertise on cloud application and infrastructure security design patterns
• Deliver training and thought leadership on secure software practices
• Review and improve authentication, authorization, data access, and security layers
• Research and propose advanced security patterns (e.g., MPC, multi-signature, confidential computing)
• Collaborate with product teams to adopt security improvements

Key requirements

• Bachelor or post-graduate diploma in cybersecurity or technology
• 5 years of experience in product security, application security, cloud security, or secure software development
• Threat modeling, risk assessment, controls review
• Experience with SAST, DAST, SCA and guiding engineers on vulnerabilities and mitigations
• Deep understanding of authentication/authorization, TLS, PKI, network security, cloud security, system security
• Strong analysis, detail orientation, and strategic thinking
• Strong communication skills and collaborative mindset
• Security or cloud certifications

• Collaborative
• solution-driven
• clear communication
• Threat modeling
• SAST
• DAST

…