Phantom

Full-stack Engineer

• Build real-time risk controls and decisioning systems for ACH, debit cards, onramps, off-ramps, and other money movement experiences
• Develop signals, models, and product interventions to identify malicious wallets, transactions, applications, and user behavior
• Build scalable KYC, sanctions screening, transaction monitoring, case management, and audit systems
• Create pipelines and tools combining on-chain activity, product data, and third-party signals into actionable risk insights
• Partner with product and engineering teams to design safeguards into new features
• Build internal tools for Risk, Compliance, Support, and Security teams to investigate incidents and take action
• Help establish technical foundations and engineering culture for a new high-impact function

Staff Engineer, Full Stack – Trust, Safety & Risk

Security Engineer

• Perform regular security assessments on new projects, infrastructure and code
• Identify and mitigate vulnerabilities in code, systems and networks through manual testing, automated tools, threat modeling and threat intelligence
• Monitor offensive security techniques, application security threats and blockchain security best practices; recommend security posture improvements
• Write detailed findings reports and present them to management and technical teams
• Help prevent real-world attacks
• Work with development teams on secure coding practices and cryptographic function integrity
• Collaborate with development and platform teams to integrate security across the organization
• Participate in incident response and incident management
• Lead large cross-team projects

Staff Product Security Engineer – Security

Platform Engineer

• Own and improve security across Phantom’s multi-account AWS environment, including IAM, Identity Center, networking, compute, storage, secrets, logging, and organization-level guardrails
• Secure production Kubernetes environments running on Amazon EKS, including cluster configuration, workload identity, RBAC, admission controls, network boundaries, secrets, container security, and tenant isolation
• Design least-privilege access models for engineers, services, and automation
• Build scoped, auditable, and time-bound access paths for sensitive production systems
• Protect infrastructure supporting products and services that handle sensitive data and high-value operations
• Lead security design for new infrastructure, platform services, and major architectural changes
• Build reusable security controls using Pulumi, Terraform, Kubernetes policy engines, and automated configuration validation
• Harden CI/CD and release systems, including GitHub Actions, workload federation, build runners, dependencies, artifacts, signing, provenance, and access to production environments
• Build tools that identify and remediate cloud and Kubernetes risks at scale
• Apply AI-assisted workflows where they improve analysis, coverage, or response speed
• Partner with Infrastructure, SRE, Developer Experience, and product engineering teams
• Establish platform-security standards and help teams adopt them

Staff Engineer, Full Stack – Trust, Safety & Risk

Staff Product Security Engineer – Security

Staff Platform Security Engineer, Security