Security Engineer IT

About Cari

The Cari Network is building a blockchain-based payment system powering real-time, 24/7 movement of digital money across the traditional finance and digital asset ecosystems. A pre-launch startup, we’re creating an entirely new category of financial infrastructure that brings cash on chain through tokenization while powering the full spectrum of payments for our network — banks and most importantly, the customers they serve.
Youll be a foundational security hire reporting directly to the CISO, building our security program from the ground up with high autonomy on a small team. Our platform processes tokenized bank deposits, turning payment instructions into immutable on-chain records. Youll secure every step of that path: identity, cloud, and detection, through our institutional custody integration, all the way to on-chain finality on our private ZKsync-based L2.
Secure blockchain and signing infrastructure.

Partner with engineering to threat-model and harden our Solidity smart contracts, private ZKsync L2 nodes, and custody platform integrations. Deploy and own our SIEM, onboarding and normalizing logs across cloud, identity, endpoint, and application layers. Build high-signal detections for authentication abuse, control plane activity, privilege escalation, data movement, and anomalous transactions. You own alert quality, not alert volume.
Harden AWS.

Enforce least-privilege IAM, network segmentation, and secrets management across ECS/EKS, MSK, and RDS.
Make security part of shipping.

Build automated security gates into CD pipelines and developer workflows, so security keeps pace with delivery.
Work with the CISO to implement and document controls for bank-level governance, third-party risk, and audits such as SOC 2 Type II.
8+ years in information security, DevSecOps, or infrastructure security.
~ SIEM and detection:

deployment, tuning, log onboarding, and detection authoring. AWS security:

Experience securing EVM-compatible blockchain or Web3 infrastructure.
Experience securing CD pipelines (GitHub Actions or equivalent) and containerized workloads.
Comfort working with high autonomy on a small team building a security program from scratch.
Solidity smart contract reviews, including upgradeable proxies (such as UUPS) and role governance.
S. banking regulation (FFIEC), or SOC 2 Type II and ISO 27001 audits.
Competitive base salary, bonus, and equity
~ Full medical, vision, dental benefits
~Flexible PTO in a remote-first environment
~ Comply with all Cari information security policies, including the Acceptable Use Policy, and complete required security awareness training.
Protect the confidentiality, integrity, and availability of Cari systems and data, including bank-partner and customer information, consistent with least-privilege access principles.