About Alpen LabsAlpen Labs is building the infrastructure layer that expands what Bitcoin can do. We’re building Alpen to become Bitcoin’s financial system, enabling users and institutions to access financial services directly on Bitcoin. Founded by MIT alumni and based in New York, the company focuses on advancing Bitcoin through innovations in zero-knowledge cryptography, scalable Layer 2 systems, and trust-minimized programmable infrastructure.We believe Bitcoin is entering a new phase where developers, institutions, and financial systems will build directly on top of it. Alpen enables this by adding financial services, privacy, and usability layers to Bitcoin, making it practical to use as money at a global scale.Our team includes engineers and researchers from organizations such as Blockstream, Palantir, and Nethermind, as well as contributors to major open-source cryptography and blockchain projects.Role OverviewAs a Senior Infrastructure Security Engineer, you will lead the security of Alpen’s cloud infrastructure, production systems, internal platforms, and operational environments. This role is ideal for someone who combines deep technical security expertise with a strong sense of ownership and a pragmatic approach to balancing security, reliability, and developer productivity.You’ll play a critical role in strengthening Alpen’s security posture as we scale a global, distributed Bitcoin infrastructure platform. Working closely with infrastructure, platform, and engineering teams, you’ll design secure systems, improve detection and response capabilities, and embed security throughout the software and operational lifecycle.Key ResponsibilitiesDesign, implement, and maintain security controls across AWS and cloud-native infrastructureLead infrastructure hardening initiatives across servers, containers, Kubernetes clusters, and cloud servicesDrive identity and access management programs, including least-privilege access, RBAC, privileged access management, and secrets managementOwn vulnerability management processes, remediation programs, and infrastructure security reviewsBuild and improve security monitoring, detection engineering, alerting, and incident response capabilitiesInvestigate security incidents, conduct root-cause analysis, and lead response and recovery effortsDevelop and maintain incident response playbooks, operational procedures, and security runbooksPartner with engineering teams to secure CI/CD pipelines, deployment workflows, and developer platformsReview infrastructure architecture and operational changes to identify and mitigate security risksAutomate security controls and integrate security tooling into engineering workflowsConduct threat modeling and architecture reviews for infrastructure and platform servicesSupport endpoint security, device management, vendor security assessments, and internal security initiativesEstablish security metrics, reporting, and visibility into operational risk across the organizationCollaborate effectively within a globally distributed teamWhat We’re Looking ForMust-Have Skills & Experience7+ years of experience in infrastructure security, security engineering, security operations, or related fieldsStrong experience securing cloud environments, particularly AWSDeep understanding of Linux systems administration and securityHands-on experience with Kubernetes, containers, and cloud-native infrastructureExperience with SIEM, EDR, logging, monitoring, and incident response toolingStrong knowledge of networking, VPNs, DNS, firewalls, load balancing, and network security principlesExperience implementing IAM, RBAC, secrets management, and privileged access controlsExperience securing CI/CD pipelines and infrastructure-as-code environmentsStrong scripting or programming skills in Python, Go, Bash, Rust, or similar languagesExperience leading security initiatives in production environmentsNice-to-Have (Bonus Points!)Experience supporting blockchain, fintech, or financial infrastructure environmentsExperience securing Bitcoin, Layer 2, or distributed systems infrastructureFamiliarity with Terraform, Pulumi, Ansible, or similar infrastructure-as-code toolingExperience with SOC 2, ISO 27001, or similar security and compliance frameworksKnowledge of zero-trust architectures and modern cloud security practicesExperience with threat hunting, detection engineering, and threat intelligence programsBackground working in startup or high-growth environmentsWhat We OfferWhat we extend to our new hires is an invitation to actively contribute to the evolution of cutting-edge technologies within the blockchain space. This presents a unique opportunity to innovate and devise creative solutions for complex security and infrastructure challenges. To support your journey, we commit to providing all the resources necessary for your learning, growth, and productivity.Moreover, our compensation package is designed to mirror the passion, dedication, and hard work you invest in your role. We recognize and appreciate your contributions by aligning your exceptional commitment with generous compensation.
