Senior Security Engineer, Identity and Access Management
"About The Role"
About This Role
HackerOne sits at the intersection of offensive security and emerging technology, partnering with organizations across finance, government, and crypto (including Crypto.com) to continuously reduce cyber risk. This role goes beyond traditional IAM administration—you'll architect the access models and automation layer governing humans, service accounts, and autonomous AI agents alike, applying principles of least privilege and least agency that mirror the trustless, verifiable logic found in smart contracts and decentralized infrastructure.
What You'll Be Doing
Own the full identity lifecycle—from provisioning through deprovisioning—for people, service accounts, and AI agents, engineering automation that grants access based on verifiable need
Design scalable, policy-driven access models that enforce least privilege, similar to permissioning logic in distributed, trust-minimized systems
Build automated entitlement reviews and continuous access certification pipelines to eliminate manual administration
Partner cross-functionally with security, platform, and AI teams to embed identity controls directly into engineering workflows
Develop monitoring and anomaly detection for identity-related risk across cloud, code, and AI systems
Champion a security-first culture that treats identity as foundational infrastructure, not an afterthought
What We're Looking For
5+ years in security engineering with deep expertise in identity and access management, IAM automation, or related infrastructure security
Strong scripting/engineering background (Python, Go, or similar) with experience building production-grade automation
Familiarity with cloud-native identity platforms, zero-trust architectures, and policy-as-code frameworks
Understanding of decentralized trust models, cryptographic authentication, or blockchain-based identity concepts is highly valued
Excellent communication skills and ability to influence engineering teams without direct authority
Comfort operating in ambiguity, building from first principles in a fast-moving, AI-driven environment
Bonus Points
Experience securing Web3, crypto, or DeFi infrastructure, including wallet access, smart contract permissions, or multi-sig governance
Background designing identity systems for autonomous agents or non-human identities
Exposure to distributed ledger technology and its implications for access control and verifiable credentials
Why Join Us
Competitive compensation, equity, and comprehensive benefits
Flexible, remote-first culture with intentional in-person collaboration
Direct impact on securing the organizations building the future of AI, crypto, and decentralized innovation
Opportunity to shape a greenfield IAM function at a company recognized as an industry leader in offensive security
About HackerOne
HackerOne is at the forefront of securing the decentralized future, empowering the blockchain and Web3 ecosystem with unparalleled security expertise. As the world's leading hacker-powered security platform, we are uniquely positioned to protect the innovative applications and infrastructure driving the next generation of the internet. Our mission is to make the internet safer for everyone, and we achieve this by connecting companies with the global hacker community to find and remediate vulnerabilities before they can be exploited. In the fast-evolving world of crypto and decentralized finance (DeFi), robust security is paramount, and HackerOne provides critical solutions that enable trust and resilience. Our culture thrives on transparency, collaboration, and a relentless pursuit of excellence. We champion curiosity, continuous learning, and a proactive approach to solving complex security challenges. At HackerOne, you'll work alongside passionate experts dedicated to fortifying blockchain protocols, smart contracts, and Web3 applications against emerging threats. We value diverse perspectives and foster an inclusive environment where every team member is empowered to contribute meaningfully to our collective success and the security of the digital world. If you're a security professional, developer, or enthusiast with a deep understanding of blockchain technology and a passion for making a tangible impact, HackerOne offers an unparalleled opportunity. Join us to leverage your skills in a dynamic, high-growth sector, working on cutting-edge Web3 projects that are redefining digital interaction and ownership. Contribute to a mission that matters, accelerate your career, and help us build a more secure, decentralized world.
Ready to Apply?
To submit your application for this position, please visit HackerOne's official website and follow their application process.