About Ondo Finance

Ondo Finance builds financial infrastructure for tokenized real-world assets across traditional-finance and onchain systems.

About the Role

This hands-on senior individual contributor will partner with product engineering teams to improve how Ondo ships secure products. The role covers threat modeling, secure code review, application-security tooling, the secure software development lifecycle, and broad ownership of critical product-security functions.

Responsibilities

• Lead threat modeling for new features, integrations, and architecture changes.
• Review high-risk code involving authentication, sessions, cryptography, wallets, signing, RPC services, permissions, and third-party integrations.
• Expand AppSec tooling, reduce false positives, and improve security's place in development workflows.
• Run responsible disclosure and bug-bounty programs, including scope, triage, payouts, and remediation.
• Coordinate findings from external audits and penetration tests and drive closure with engineering owners.
• Develop secure-by-default patterns and assess blockchain-integrated components with engineering teams.
• Help hire, mentor, and raise the technical bar of the Security team.

Requirements

• 5+ years in Product Security or Application Security, including senior individual-contributor work.
• Deep secure-code-review ability in TypeScript or JavaScript, Python, or Go.
• Strong threat-modeling, AppSec tooling, bug-bounty, web-security, API-security, IAM, Terraform, and CI/CD knowledge.
• Strong engineering partnership skills and willingness to grow into blockchain-adjacent product security.

Nice to Have

• Experience in crypto, fintech, wallet or key-management security, Solidity or Rust, browser extensions, mobile security, or account abstraction.