Grayscale is the largest digital asset-focused investment platform in the world by AUM and offers the broadest selection of digital asset investment products in the U.S. based on number of products.
Our platform spans the full spectrum of institutional-grade solutions—from single-asset exposures to diversified and thematic strategies—with a goal of providing every investor with access to the hyper-expanding digital asset universe. Our firm offers a rare combination of decades of traditional finance work experience and digital asset leadership that brings an institutional mindset to the maturing digital asset industry. This convergence of capabilities positions us to deliver investment solutions and client experiences that are both institutionally robust and technologically advanced, which we believe offers a competitive edge that is difficult to replicate.
We’re proud of our deep crypto expertise and work closely with individual and institutional investors as they explore this asset class as part of their portfolio allocation.
Position Summary
Grayscale Investments is seeking a Cybersecurity Engineer to build, implement, and maintain security capabilities across our technology platforms.
You will be responsible for implementing security controls, automating security processes, and integrating security throughout the software development lifecycle across cloud infrastructure, enterprise applications, AI-enabled systems, and modern engineering platforms. This role is instrumental in ensuring Grayscale's technology environment remains secure, resilient, scalable, and aligned with regulatory expectations.
Working closely with engineering, product, and compliance teams, you will help embed secure-by-design principles into technology solutions, strengthen cloud and application security, improve detection and monitoring capabilities, and support the secure adoption of emerging technologies across Grayscale.
Responsibilities:
- Partner with engineering teams to implement security controls and secure design patterns across cloud infrastructure, enterprise applications, developer platforms, and AI-enabled systems.
- Build and operationalize security controls that protect sensitive data, including identity and access management, data protection, network security, logging, monitoring, and auditability.
- Participate in threat modeling, architecture reviews, and security assessments for applications, cloud platforms, and emerging technologies, identifying and mitigating security risks before deployment.
- Implement and maintain security controls for cloud platforms, APIs, developer tooling, and third-party technologies.
- Build monitoring, detection, alerting, and incident response capabilities in partnership with engineering and security operations teams.
- Integrate security tooling and automation into CI/CD pipelines and cloud-native engineering workflows using Infrastructure-as-Code and policy-as-code practices.
- Support secure software development by partnering with engineering teams to embed security throughout the Secure Software Development Lifecycle (SSDLC).
- Assess and mitigate technical and operational risks associated with cloud platforms, enterprise applications, AI-enabled systems, and third-party providers.
- Partner with compliance, audit, and business stakeholders to ensure technology solutions meet regulatory, control, and governance requirements.
- Contribute to the development of security standards, engineering patterns, automation, and operational best practices across the organization.
- Stay current on emerging security threats, technologies, and industry best practices while helping strengthen Grayscale's long-term security capabilities.
Qualifications:
- 5+ years of experience in cybersecurity, security engineering, cloud security, application security, DevSecOps, or a related engineering discipline.
- Experience implementing security controls within cloud-native environments, preferably AWS.
- Strong understanding of security fundamentals including identity and access management, data protection, network security, vulnerability management, monitoring, and incident response.
- Experience integrating security into software development workflows, including CI/CD pipelines and Secure Software Development Lifecycle (SSDLC) practices.
- Strong programming and scripting capabilities (e.g., Python, Terraform, Infrastructure-as-Code) with the ability to automate and validate security controls.
- Experience with cloud infrastructure, Kubernetes, APIs, and modern application architectures.
- Experience with security tooling such as SIEM/SOAR, vulnerability management, cloud security, endpoint security, application security, or detection engineering platforms.
- Experience conducting threat modeling, security assessments, and architecture reviews for modern applications and cloud platforms.
- Familiarity with AI/ML systems, including LLMs and AI-enabled application architectures, is a plus.
- Experience operating in regulated environments with strong control, audit, and compliance requirements, preferably within financial services.
- Strong communication skills with the ability to collaborate effectively across engineering, infrastructure, product, and security teams to solve complex technical challenges.
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Skills Required
- 5+ years of experience in cybersecurity, security engineering, cloud security, application security, or DevSecOps
- Implementing security controls within cloud-native environments (AWS preferred)
- Strong understanding of identity and access management, data protection, network security, vulnerability management, monitoring, and incident response
- Integrating security into CI/CD pipelines and Secure Software Development Lifecycle (SSDLC)
- Programming and scripting skills (example: Python) and Infrastructure-as-Code experience (example: Terraform)
- Experience with cloud infrastructure, Kubernetes, APIs, and modern application architectures
- Experience with security tooling (SIEM/SOAR, vulnerability management, endpoint security, application security, or detection engineering platforms)
- Conducting threat modeling, security assessments, and architecture reviews
- Ability to build monitoring, detection, alerting, and incident response capabilities
- Experience working with compliance, audit, and governance requirements in regulated environments
- Familiarity with AI/ML systems and LLMs
- Strong communication and collaboration skills across engineering, product, infrastructure, and security teams
What We Do
Grayscale enables investors to access the digital economy through a family of secure, compliant, and future-forward investment products. Founded in 2013, Grayscale has a proven track record and unrivaled expertise as the world’s largest digital currency asset manager. Investors, advisors, and allocators turn to Grayscale’s private placements, public quotations, and ETFs for exposure to both single asset, diversified, and thematic investment products. Disclosure: grayscale.com/terms
