Security Engineer, Principal

**Affinidi** focuses on changing data ownership for good, empowering communities with control and ownership of their data. We do that through enabling the creation, sharing and verification of Verifiable Credentials - a secure and cryptographically verifiable way of sharing sensitive data.

Headquartered in Singapore, with offices in India, Germany and Ukraine, Affinidi offers a myriad of solutions deploying decentralized technology and verifiable credentials that create a delightful experience for different groups of customers. These include industries such as health, travel, finance, education and employment. Affinidi, along with Trustana and GoodWorker, are businesses under LemmaTree.

We're more than just a workplace. In our company, you'll discover a world of passionate people guided by an inclusive purpose. We love the journey as much as the destination, and belonging to a team that prides itself on mutual respect.

If you're passionate about decentralised technologies, we'd love to speak with you.

**Equal Opportunity**

We believe in hiring different and diverse talent and providing a safe space where everyone can share their views without fear, where differences are celebrated, and where no one is left out. Inclusive cultures are the foundation for collaboration and innovation within our team.

**About the role**

As a Principal Security Engineer at Affinidi, you will take on a significant role by driving security initiatives that are larger in scope, impact, and value, leveraging your influence.

**We are looking for people with the following skills**:

- **_Security is Job-Zero:_** **Security is your top priority, and you are the type of leader that drives other people to care about security as a top priority as well
- **_Data-Driven and Analytical:_**_ _Analyzing and drawing actions based on data and risk analysis
- **_Strong communicator_**: You are exceptional at articulating security concepts to all levels of internal and external audiences. You are resourceful, even with tight schedule and limited resources available to you.
- **_Superior Problem-Solving Skills: _**Identifying and solving complex problems in a methodological manner. You can dive deep into challenges and can come up with workable solutions for any problem
- **_Intellectual Curiosity:_**_ _Possessing innate desire for learning, you understand broad security concepts and ask thoughtful, deliberate questions
- **_'Get job done' mentality_**: You are prepared to work with the ambiguity of a start-up environment. You thrive in a fast-paced, high-growth and ambitious organisation. You can get things done and think about the big picture, while keeping security at the forefront of everything you do
- **_Influence: _**Ability to influence without authority, through persuasion, negotiation, and data-driven consensus-building, both inside your domain specialty, and cross-functionally

**What you'll do**:

- Own and drive security strategy and influence change across all the organization and products
- Drive difficult or highly complex security reviews and threat modeling. Assist and direct other team members on challenging security reviews
- Own documentation and procedures for security reviews as well as lead by example for what successful security reviews look like
- Enable automated security testing at scale for our entire platform to identify and proactively resolve vulnerabilities
- Design, architect and develop tooling that helps ship secure code faster
- Drive security issues through the incident response process to ensure risks and compliances are managed
- Be excited and curious, as you define what good looks like for security in a decentralized world
- Work in an exciting startup environment where you can be autonomous and try new things
- Have 13+ years of experience of relevant experience for the role
- You have vast experience in Security Engineering, Secure architecture design
- You have experience driving roadmaps and building security effective teams
- You are strongly automation driven and a shift-left advocate
- Have strong development or scripting experience and skills
- Have worked with Distributed Systems and Microservices before
- Have strong cryptography knowledge

**Our Stack is**
- Javascript/Typescript/node.js
- AWS
- Gitlab
- Containers
- IOS/Android

**Bonus points if**:

- You have experience with applied cryptography
- You have experience with data privacy & data security implementations on blockchain & distributed storage platforms for individuals & organizations

**What can you expect from us**:

- Unlimited vacation policy
- Competitive compensation package
- Work within international environment
- Hybrid working model
- Flexible working hours
- Educational Budget
- Urban Sport Membership
- Mobile Allowance
- Home Office Allowance

**Interview stages**:

- Recruiter call
- Technical Assessment
- Cross-functional interview
- Cultural & leadership round

**Equal Opportunity Statement**

Our company embrace