SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Squads is a fintech company building products and APIs for the stablecoin economy. The company operates three main products: Squads Multisig (asset management on Solana), Altitude (global business accounts), and Fuse (stablecoins for personal finance). Over 450 teams use Squads Multisig to secure $10+ billion in value, backed by investors including Haun Ventures, Multicoin Capital, Electric Capital, and Coinbase Ventures.
You will own product and infrastructure security across all Squads products, working closely with the Head of Security, CTO, and engineering leads. This is a hands-on role where you'll be embedded in system design decisions from the start, not reviewing decisions after they're made.
Key responsibilities:
**Design & Code Review:** Participate in product and engineering calls as the security reviewer, raising concerns early when designs are still malleable. Lead threat modeling and security design reviews for new products, features, and infrastructure changes. Perform hands-on secure code review across backend services, APIs, frontends, and Solana programs, with focus on authentication, authorization, and access control.
**Vulnerability Management:** Own the complete lifecycle for findings from audits, pentests, code scanning, and bug bounty programs—triage, prioritization, remediation tracking, and fix verification. Set severity and SLA standards and hold the team accountable. Run bug bounty intake, validate external reports, coordinate with audit partners, and scope internal assessments.
**Secure SDLC & Infrastructure:** Tune and extend SAST, dependency, secrets, and container scanning in CI/CD to build engineer trust in the signal. Review IAM, network controls, encryption, and secrets management across cloud environments, including API key ownership, permissions, and rotation. Assess what internal AI tools, MCP integrations, and agents can reach in production and scope their access appropriately. Define product security standards, review checklists, and developer guidance that scale with the team.
You'll work in a small, high-standards environment with direct access to leadership and the ownership to build the product security program while operating it. The stakes are concrete: security gaps directly impact customer funds and business operations.
**Requirements:**
- 8+ years in product security, application security, or security engineering, built on a software engineering foundation
- Ownership of threat modeling and architecture review for complex financial or distributed systems, with standing to shape design decisions
- Track record of finding critical, non-obvious vulnerabilities in large production codebases (TypeScript, Rust, Go, or Python), including through LLM and agent-based review workflows you've built and run
- Experience building and running a vulnerability management program or bug bounty end-to-end, including CI/CD scanning that feeds it
- Deep expertise in IAM, secrets management, network controls, and container security on AWS or comparable provider
- Strong written communication and judgment to work independently
**Preferred experience:**
- Reviewing Solana programs (Rust/Anchor) or audit firm background
- Cryptography and key management (HSMs, MPC, PKI)
- Offensive testing across web and mobile
- Red teaming AI systems
- Supporting SOC 2 from the product side
