Principal Security Engineer

Who are we? An electricity exchange for the energy transition. ElectronX™ is a new electricity market designed to enable precision risk management, volatility hedging opportunities, and the monetization of power assets for all energy market participants. As a CFTC-regulated financial exchange (subject to approval), ElectronX will offer derivatives products that capture the intraday price fluctuations of our rapidly changing electrical grid—helping to smooth the financial path of clean energy adoption across the nation.

Who are we looking for?

As a growing company, ElectronX values candidates who are resourceful, curious and adaptable to change. Our cultural focus on innovation requires collaborative and entrepreneurial teammates with the intellectual grit necessary for success in the highly competitive capital markets and climate tech industries.

What you will be doing:

• Lead and manage the global security engineering efforts at ElectronX
• Design, implement, and optimize security tools and processes across the organization
• Conduct vulnerability management, including research, remediation, and response
• Perform security assessments for exchange applications and networks
• Implement and manage security automation initiatives
• Ensure compliance with security frameworks and standards (e.g. NIST CSF 2.0, SOC 2)
• Develop and maintain cloud security posture across multiple platforms (AWS, Google Cloud, Azure)
• Lead bug bounty programs and manage security research initiatives
• Conduct source code reviews and penetration testing

What we need from you:

• Bachelor’s degree in Computer Science, Information Security, or related field; advanced degree or relevant certifications (e.g., CISSP, CEH) preferred
• 8+ years of experience in information security, with at least 3 years in a senior or lead role
• Proven expertise in multiple areas of security, such as application security, network security, and cloud security
• Hands-on experience with security tools, including firewalls, IDS/IPS, and vulnerability scanners
• Strong knowledge of security frameworks and standards (ISO 27001, GDPR, PCI-DSS)
• Experience in implementing and maintaining compliance with security regulations
• Proficiency in scripting and programming languages (e.g., Python, Java, JSP)
• Extensive experience with cloud platforms (AWS, Google Cloud, Azure) and their security features
• Familiarity with emerging technologies such as exchange and high-frequency trading (HFT) security
• Strong background in vulnerability assessment, penetration testing, and incident response
• Experience in leading and mentoring security teams

Bonus points if:

• You’ve started a company in the past
• You’ve worked at a startup
• You’re fired up about exchanges, markets, electricity, or renewables

What does ElectronX offer?

• Paid healthcare including health, dental, and vision
• 401K
• Supplemental health and disability insurance
• Unlimited vacation
• Flex-work
• ElectronX gear!

Equal Opportunity Statement:

ElectronX is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.