Cybersecurity Engineer

Grayscale is the largest digital asset-focused investment platform in the world by AUM and offers the broadest selection of digital asset investment products in the U.S. based on number of products.

Our platform spans the full spectrum of institutional-grade solutions-from single-asset exposures to diversified and thematic strategies with a goal of providing every investor with access to the hyper-expanding digital asset universe. Our firm offers a rare combination of decades of traditional finance work experience and digital asset leadership that brings an institutional mindset to the maturing digital asset industry. This convergence of capabilities positions us to deliver investment solutions and client experiences that are both institutionally robust and technologically advanced, which we believe offers a competitive edge that is difficult to replicate.

We're proud of our deep crypto expertise and work closely with individual and institutional investors as they explore this asset class as part of their portfolio allocation.

Grayscale Investments is seeking a Cybersecurity Engineer to build, implement, and maintain security capabilities across our technology platforms.

You will be responsible for implementing security controls, automating security processes, and integrating security throughout the software development lifecycle across cloud infrastructure, enterprise applications, AI-enabled systems, and modern engineering platforms. This role is instrumental in ensuring Grayscale's technology environment remains secure, resilient, scalable, and aligned with regulatory expectations.

Working closely with engineering, product, and compliance teams, you will help embed secure-by-design principles into technology solutions, strengthen cloud and application security, improve detection and monitoring capabilities, and support the secure adoption of emerging technologies across Grayscale.

• Partner with engineering teams to implement security controls and secure design patterns across cloud infrastructure, enterprise applications, developer platforms, and AI-enabled systems.
• Build and operationalize security controls that protect sensitive data, including identity and access management, data protection, network security, logging, monitoring, and auditability.
• Participate in threat modeling, architecture reviews, and security assessments for applications, cloud platforms, and emerging technologies, identifying and mitigating security risks before deployment.
• Implement and maintain security controls for cloud platforms, APIs, developer tooling, and third-party technologies.
• Build monitoring, detection, alerting, and incident response capabilities in partnership with engineering and security operations teams.
• Integrate security tooling and automation into CI/CD pipelines and cloud-native engineering workflows using Infrastructure-as-Code and policy-as-code practices.
• Support secure software development by partnering with engineering teams to embed security throughout the Secure Software Development Lifecycle (SSDLC).
• Assess and mitigate technical and operational risks associated with cloud platforms, enterprise applications, AI-enabled systems, and third-party providers.
• Partner with compliance, audit, and business stakeholders to ensure technology solutions meet regulatory, control, and governance requirements.
• Contribute to the development of security standards, engineering patterns, automation, and operational best practices across the organization.
• Stay current on emerging security threats, technologies, and industry best practices while helping strengthen Grayscale's long-term security capabilities.

• 5+ years of experience in cybersecurity, security engineering, cloud security, application security, Dev Sec Ops , or a related engineering discipline.
• Experience implementing security controls within cloud-native environments, preferably AWS.
• Strong understanding of security fundamentals including identity and access management, data protection, network security, vulnerability management, monitoring, and incident response.
• Experience integrating security into software…