DevOps Security Engineer

Legacy is an easy-to-use, non-custodial Web3 wallet designed to protect digital assets through beneficiary protection and seamless DeFi access. The company is built by the team behind Decentralized Masters - a profitable $50M+ education and investment ecosystem with 4,000+ high-net-worth investors. The role requires a security-focused DevOps Engineer with expertise in penetration testing, vulnerability assessments, and threat modeling.

Requirements

• 5+ years in software engineering roles with meaningful, hands-on security and QA experience
• Fullstack development experience: ability to build and ship features across frontend and backend
• Hands-on penetration testing and vulnerability assessment experience across web applications, APIs, and cloud infrastructure
• Strong working knowledge of OWASP standards, including the OWASP Top 10, OWASP Testing Guide, and OWASP secure coding practices
• Experience building automated test frameworks and integrating testing into CI/CD pipelines
• AWS expertise (EC2, ECS/EKS, Lambda, VPC, IAM, S3, RDS, CloudFront, WAF)
• Infrastructure as Code experience (Terraform, CloudFormation, or Pulumi)
• Container technologies: Docker and Kubernetes in production environments
• Scripting and automation proficiency in Bash and Python
• Experience with secrets management tools (HashiCorp Vault, AWS Secrets Manager, or similar)
• Familiarity with security and testing tools (Burp Suite, OWASP ZAP, Selenium, Cypress, Jest, Postman, or equivalent)
• Strong communication skills: ability to explain security risks and quality tradeoffs clearly to non-technical stakeholders

Benefits

• Competitive salary + performance-based incentives tied to retention & LTV improvement
• Direct exposure to founders
• Team Offsites
• Remote work
• High ownership, high-impact role