About the company Hi, we're Ondo Finance. Our mission is to provide institutional-grade, blockchain-enabled investment products and services. We have both a technology arm that develops decentralized finance technology, and an asset management arm that creates and manages tokenized funds. We were the first company to tokenize exposure to US Treasuries, and have since expanded into several other assets. We are also focused on incubating protocols that can support both tokenized real-world assets and traditional crypto. Founded by folks from Goldman Sachs Digital Assets Team, we’re backed by some of the best investors in the world including Founders Fund, Coinbase Ventures, Pantera Capital, Tiger Global, and more. We are currently the leaders in the space in terms of AUM and are well capitalized to continue growing the firm. We're fully remote, with team members across the U.S. About the Role We are hiring a Senior Security Engineer to own how we secure cloud, network, and infrastructure-as-code at Ondo. You will set the bar for how production is built and operated: identity, network segmentation, secrets, IaC guardrails, runtime posture, and offensive testing. This role sits between platform engineering and security. You will write Terraform, review Terraform, write the policies that gate Terraform, and break things in staging to prove the policies actually hold. You will partner with Operations / IR on cloud detection coverage and with Product Security on the boundary between app and infra. What You’ll Do Own cloud security posture across AWS and GCPs: IAM, network, encryption, logging, and account structure. CNAP: prioritize findings against real risk, drive remediation through engineering, and measure progress. Design and enforce IaC guardrails: pre-merge policy-as-code, required modules, and CI gates that make the secure path the default. Lead identity and access design across cloud, IdP, and developer platforms. Drive least-privilege as a continuous

Senior Security Engineer - Infrastructure