Lead Security and Infrastructure Engineer (GCP Web3) Remote (United States

About Rise

Rise is a global payments and payroll platform built for the way modern teams actually work - across borders, currencies, and rails. We make it possible for companies to pay full-time employees, contractors, and freelancers anywhere in the world, in either fiat or digital assets, with the compliance, tax, and identity infrastructure handled underneath.

At our core we bridge two worlds: traditional finance and Ethereum-based settlement. Payments can move as stable coins on-chain or through conventional banking rails, and our platform manages the invoicing, KYC/KYB, onboarding, and reporting that make that seamless for both payers and recipients.

Our stack runs on Google Cloud Platform (Cloud Run, Big Query), with MySQL
, a Node.js / Type Script application layer, and Cloudflare (including Cloudflare Pages) at the edge. Rise is underpinned by a large smart-contract ecosystem deployed across EVM chains - payments, settlement, and identity flows are anchored on-chain - and we work daily with Ethereum and EVM-compatible networks, wallets, and stablecoin settlement.

We're a lean, high-trust, high-ownership team. Because we move real money for real people, we hold a high bar for correctness, security, and accountability - the work is meaningful precisely because the stakes are real. We value:

• Ownership over hand-offs. You'll own systems end to end, from design to on-call, and have the autonomy that comes with that.

• Security as a default, not a phase. Handling funds and personal data means security thinking is part of every decision, not a box checked at the end.

• Directness and low ego. We give and receive candid feedback, write things down, and prefer clarity over politics.

• Remote-first discipline. We're a globally distributed team spread across time zones around the world, and we communicate asynchronously with a bias toward documentation and reproducibility.

Working directly with the CTO, you'll own security, infrastructure ops, and reliability across Rise's cloud, application, and on-chain surfaces. This is a builder's role, not a purely advisory one - you'll harden what exists, design what's missing, and be the person the team turns to when security and infrastructure questions come up. This is a hands-on role: you'll run the day-to-day infrastructure operations behind our code releases and keep our production infrastructure healthy, available, and secure.

You'll have end-to-end accountability for the infrastructure, on a mostly serverless stack that's designed to keep operational overhead low. As Rise grows, you'll have the opportunity to define the security and infrastructure function and build a team beneath you.

Security engineering

• Own Rise's security posture across cloud, application, and on-chain surfaces.

• Lead incident response: detection, containment, forensics, remediation, and blameless post-mortems - and build the tooling and runbooks so we respond faster next time.

• Establish and enforce secure defaults: secrets management, least-privilege IAM, network segmentation, and audit logging.

• Own secrets management and access governance, applying least privilege and separation of duties across production systems.

• Run threat modeling, vulnerability management, and periodic security reviews across services and smart-contract integrations.

• Build detection and alerting for anomalous traffic, abuse, and scanning against our public endpoints (Cloud Run / load balancer / Cloudflare).

• Drive compliance and audit-readiness efforts (e.g., SOC
  2) and represent security to partners and customers.

Infrastructure operations & platform reliability

• Own the infrastructure operations behind code releases: run and improve the deployment pipelines that ship our fleet of Cloud Run services to production, and be accountable for safe, repeatable releases (rollouts, rollbacks, and release hygiene).

• Provide day-to-day operational support for our production infrastructure - keeping services healthy and available, responding to operational issues, and doing the maintenance, upgrades, and toil-reduction that keep the platform running.

• Build and maintain CI/CD, infrastructure-as-code, and deployment…