Security Assurance Engineer

About the role

As a Security Assurance Engineer at Chainlink Labs, you will focus on automating security assurance workflows to improve efficiency and reliability. Your work will involve streamlining the collection and analysis of security data, enhancing audit readiness, and integrating AI capabilities into existing processes.

Chainlink is a leader in the oracle space, supporting decentralized finance and a range of institutional applications. You will collaborate with a team dedicated to maintaining high security standards and compliance, ensuring that the organization continues to meet the needs of its diverse clientele.

Skills that matter here

• Python: You will develop scripts and automations to improve security assurance workflows.
• APIs: Experience with APIs is essential for processing and managing technical information.
• JSON: You will work with JSON to handle structured datasets effectively.
• Git: Familiarity with Git is required for managing code and automation scripts.

Who this role suits

• You have a strong background in security engineering or compliance, ideally within regulated environments.
• You are comfortable working in a remote-first setting and can manage your time effectively.
• You are proactive in identifying opportunities for automation and improvement in security processes.
• You possess a collaborative mindset and can effectively communicate with team members across different time zones.

From the employer

Your Impact

• Develop and improve automated security assurance workflows that reduce manual effort and increase the consistency and reliability of assurance activities.
• Streamline the collection, processing, and analysis of security evidence across technical systems to improve audit readiness and control visibility.
• Enhance the efficiency and accuracy of access reviews, control testing, exception tracking, and risk assessments through technical automation.
• Improve the quality, traceability, and accessibility of security and compliance data to enable more reliable assurance reporting.
• Apply established security and compliance frameworks to strengthen the consistency and effectiveness of assurance processes.
• Identify opportunities to integrate AI-driven capabilities into assurance workflows to improve operational efficiency, accuracy, and quality.

Requirements

• 3+ years of experience in security engineering, cloud security, security assurance, technology risk, or technical compliance.
• Demonstrated hands-on experience developing scripts and automations using Python or a comparable programming language.
• Experience working with APIs, JSON, Git, and structured datasets to access, process, and manage technical information.
• Working knowledge of established security and compliance frameworks, such as SOC 2, ISO 27001, NIST CSF, CIS Controls, or comparable standards.

Preferred Requirements

• Experience working with enterprise security and compliance platforms such as GitHub, Okta, Wiz, Splunk, Jamf, Anecdotes, or comparable technologies.
• Built or improved automated assurance workflows involving evidence collection, user access reviews, control testing, exception tracking, risk assessments, or audit reporting.
• Demonstrated experience integrating AI tools into security assurance or engineering workflows, with measurable improvements in efficiency, accuracy, or quality.
• Experience operating in blockchain, Web3, fintech, financial services, or other highly regulated technology environments.
• Familiarity with threat modeling, application security, software supply-chain security, or incident response through previous technical or assurance work.
• Relevant professional certifications, such as AWS Certified Security – Specialty, CISSP, CISA, CCSP, or ISO 27001 Lead Implementer/Auditor.

Chainlink Labs is a remote-first organization and employment eligibility is contingent upon residing in an approved hiring jurisdiction. Team members may work outside their primary country of legal residence for a maximum of 90 days per calendar year. Please discuss your current location, legal residence, and work authorization with your recruiter during your initial conversation. Unless otherwise stated for a specific role, we require working hours that overlap with Eastern Time (ET).