Note: The job is a remote job and is open to candidates in USA. Bitmine Immersion Technologies, Inc. operates at the cutting edge of digital asset infrastructure and technology. They are seeking a Lead Security Engineer to enhance technical security across their cloud infrastructure, focusing on hardening environments and optimizing security practices while collaborating closely with engineering teams.
Responsibilities
- Cloud & Infrastructure Security: Own and advance the security of our Google Cloud (GCP) environment; operate cloud security posture management, network segmentation, and guardrails as policy-as-code; and maintain comprehensive, continuously monitored visibility across our infrastructure
- Identity, Access & Secrets: Champion least-privilege across both human and machine identities; enhance and operate short-lived, workload-bound access; and own robust secrets management and the credential lifecycle
- CI/CD, IaC & Supply Chain: Secure our pipelines and infrastructure-as-code (GitLab, Terraform); champion secrets hygiene; manage third-party, dependency, and supply-chain risk; and own vulnerability and patch management
- Detection & Response: Maintain detection engineering and security monitoring across infrastructure; advance our SIEM, logging, and alerting; and lead incident response, coordinating with external partners
- Governance & Culture: Own change-management guardrails and security review for sensitive changes; lead threat modeling and secure-SDLC practices; and raise the bar across the team through training, security champions, and clear guidance on the 'why' behind security decisions
Skills
- 8+ years of experience in security engineering, with real depth in cloud security, ideally GCP
- Strong, hands-on skills across IAM and least-privilege, secrets management, and network security in cloud-native environments
- Experience securing CI/CD pipelines and infrastructure-as-code (Terraform, GitLab, or equivalents)
- Detection engineering and security monitoring experience (SIEM, log pipelines, alerting), plus practical incident response
- Solid coding/scripting ability enough to automate, build internal tooling, and review infrastructure code
- A track record of leading technical security initiatives and influencing engineers through expertise rather than authority
- Pragmatic judgment: you raise the security bar in a fast-moving environment while keeping the business moving
- Crypto / web3 security experience: key management, HSMs or threshold signing, wallet security, validator/staking infrastructure, or smart-contract security
- Familiarity with blockchain operations, Ethereum and the broader multi-chain ecosystem
- Endpoint and identity tooling such as Microsoft Intune/Defender or FreeIPA
- Experience building or scaling a security function in a high-growth environment
Benefits
- Outsized Impact: Security is mission-critical here, with genuine leadership backing and budget (audits, tooling, headcount).
- Ownership: You'll define the technical security roadmap and own it end-to-end.
- Meaningful Challenges: Solve hard, meaningful problems at the frontier of crypto infrastructure and scale.
Company Overview