---
title: 'Staff Platform Security Engineer (Security) at Phantom'
canonical: 'https://feeny.ai/job/staff-platform-security-engineer-security-phantom-remote-fr0dxtqvy21v'
type: 'job'
last_seen: '2026-09-23'
---

# Staff Platform Security Engineer (Security) at Phantom

- **Company:** Phantom
- **Location:** Remote
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-16
- **Last confirmed live:** 2026-09-23
- **Apply:** https://jobs.ashbyhq.com/phantom/504baea1-48c7-458d-9f45-36e24dbf7035

## Job description

[Phantom](https://phantom.com) is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets that never close, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. Phantom users are able to discover the markets that matter and the cultural moments that shape them, building conviction through real-time data and the verified performance of top traders. With self-custody and access to open networks at its core, Phantom lets them control their financial moves in the same app they use to safely store or spend money worldwide. Phantom has reached #1 in Google Play's finance category and consistently ranks in the top 50 apps across all categories. Phantom partners with many of the most trusted and influential names in finance like Hyperliquid, Stripe, Kalshi and Visa, to make the most popular and innovative financial products accessible to everyone. We are around 180 people, fully remote, backed by a $150M Series C investment from a16z, Sequoia Capital and Paradigm. Platform security is foundational to protecting Phantom and the systems our users rely on. We’re hiring a Senior Platform Security Engineer to own and improve security across our AWS and Kubernetes environments. You’ll work directly with infrastructure and engineering teams to secure the control planes, identities, workloads, and deployment systems behind our most critical products. We’re building an AI-native security team that aggressively uses AI to expand the speed, depth, and reach of our work. We’re looking for a strong security engineer with high agency who can identify the risks that matter, build practical controls, and own problems through verified remediation. This is a hands-on role for someone who is comfortable working in production systems, writing code and infrastructure, responding to incidents, and making security improvements without slowing down the teams building on the platform. This role is fully remote; however, we’re only open to candidates based in the US and Canada.

## Responsibilities

- AWS Security: Own and improve security across Phantom’s multi-account AWS environment, including IAM, Identity Center, networking, compute, storage, secrets, logging, and organization-level guardrails.
- Kubernetes Security: Secure production Kubernetes environments running on Amazon EKS, including cluster configuration, workload identity, RBAC, admission controls, network boundaries, secrets, container security, and tenant isolation.
- Identity and Access: Design least-privilege access models for engineers, services, and automation. Build scoped, auditable, and time-bound access paths for sensitive production systems.
- Mission-Critical Systems: Protect the infrastructure supporting products and services that handle sensitive data and high-value operations.
- Cloud Security Architecture: Lead security design for new infrastructure, platform services, and major architectural changes.
- Infrastructure and Policy as Code: Build reusable security controls using tools such as Pulumi, Terraform, Kubernetes policy engines, and automated configuration validation.
- CI/CD and Supply Chain Security: Harden build, deployment, and release systems, including GitHub Actions, workload federation, build runners, dependencies, artifacts, signing, provenance, and access to production environments.
- Security Automation: Build tools that identify and remediate cloud and Kubernetes risks at scale. Apply AI-assisted workflows where they materially improve analysis, coverage, or response speed.
- Cross-Functional Leadership: Partner closely with Infrastructure, SRE, Developer Experience, and product engineering teams. Establish practical platform-security standards and help teams adopt them.

## Qualifications

- 7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or a closely related engineering role.
- Deep, hands-on experience securing production AWS environments. You understand IAM and resource policies, workload identity, network security, secrets management, logging, organization-level controls, and the ways these systems fail in practice.
- Deep experience securing Kubernetes in production, preferably Amazon EKS, including RBAC, workload identity, admission policy, network policy, pod security, secrets, and cluster hardening.
- Experience designing or securing mission-critical systems where compromise, excessive privilege, or loss of availability could have significant customer or business impact.
- Strong understanding of identity, authorization, least privilege, isolation, and blast-radius reduction across both human and machine access.
- Experience securing CI/CD and software supply chains, including GitHub Actions or similar systems, build runners, workload federation, artifacts, and production deployment paths.
- Experience writing and reviewing infrastructure as code using Pulumi, Terraform, CloudFormation, or similar tools.
- Ability to write production-quality code or automation in a language such as TypeScript, Python, Go, or Rust.
- High agency and ownership. You can take an ambiguous platform-security problem from initial investigation through implementation and verified remediation.
- Clear communication and a strong track record of partnering with infrastructure and engineering teams while maintaining a high security bar.

Nice To Haves

- Experience with AWS Nitro Enclaves or other trusted execution environments, including attestation, isolation boundaries, secure key handling, and operational lifecycle management.
- Experience securing financial, payments, wallet, custody, or other high-value transaction systems.
- Familiarity with key-management infrastructure, AWS KMS, CloudHSM, cryptographic signing systems, or secrets-management platforms.
- Experience operating or securing multi-region Kubernetes and AWS environments at significant scale.
- Familiarity with service meshes and cloud-native networking technologies such as Istio, PrivateLink, Transit Gateway, or eBPF-based controls.
- Experience with GitHub OIDC, Argo CD, Helm, Crossplane, or Kubernetes-based infrastructure delivery.
- Experience using cloud-security and observability platforms such as Wiz, Datadog, GuardDuty, Security Hub, or CloudTrail.
- Experience building policy-as-code, automated remediation, or security tooling used by a large engineering organization.
- Familiarity with blockchain infrastructure or self-custodial wallet architecture.

## Why Work with Us

Phantom is built by a team of experienced product and engineering leaders working to make crypto-powered finance safer and easier to use. Our platform supports products used by tens of millions of people, making infrastructure security both technically challenging and directly consequential. This role offers the opportunity to:

- Secure AWS and Kubernetes systems supporting products used by millions of people.
- Work on high-impact problems spanning cloud identity, production access, workload isolation, software supply chains, and mission-critical infrastructure.
- Build controls directly in the platform rather than operating as an advisory or review-only security function.
- Influence architecture early and own improvements through implementation and production verification.
- Help shape an AI-native security team with a strong engineering and automation culture.

## Benefits

- Competitive salary and equity
- Eligibility to participate in the company’s performance bonus program
- Comprehensive medical, dental, and vision insurance with 100% coverage
- Stipend for your ideal remote setup
- Flexible hours and a supportive remote environment
- Unlimited vacation—take time when you need it
- 401(k) retirement plan
- Monthly wellness benefit
- Weekly meal benefit
- Global off-sites

The target base salary for this role will range between $200,000 to $250,000 with the addition of equity and benefits. This is determined by a few factors including your skillset, prior relevant experience, quality of interviews and market factors (such as location) at the point in time of offer. We strongly encourage candidates of all backgrounds to apply. We believe that our work is stronger with a variety of perspectives, and we’re eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. We’re committed to building an inclusive, supportive place for you to do the best work of your career.

By submitting your resume and application materials, you acknowledge and agree that Phantom Technologies, Inc. ("Phantom") collects and processes your personal information (including application materials, interview records, and related data) to evaluate your candidacy. Phantom may use AI-powered tools and third-party service providers for transcription, note-taking, scheduling, and other administrative tasks. Phantom does not sell your information and your materials will be handled securely and in accordance with applicable data protection laws.

## About Phantom

## Company Overview
- **One-liner**: Phantom is a self-custodial, multichain crypto wallet that makes it simple and safe to store, swap, and manage digital assets, designed for mass adoption.
- **Entity Type**: Private (Series C, raised $150M in January 2025)
- **Headquarters**: Remote-first; physical headquarters not publicly disclosed
- **Founded**: 2021
- **Founders**: Brandon Millman, Francesco Agosti, Julian Tescher

## Core Business
- Primary industry: Cryptocurrency wallet & consumer finance
- Target customers: B2C (individuals managing crypto, NFTs, and decentralized finance)
- Mission: “Make money easier to use, safer to control, and more accessible to everyone”

## Products & Services
- **Multichain Wallet (SaaS)**: Non-custodial wallet supporting Solana, Ethereum, Polygon, and other chains. Users can store, send, receive, and swap tokens; manage NFTs; and connect hardware wallets like Ledger.
- **In-App Token Swapper**: Integrated exchange that recorded over $1B in swap volume within months of launch.
- **Social Features**: Usernames, profiles, and social transfers to make sending money as easy as messaging.
- **NFT Tools**: Pin, hide, burn, list, and sell NFTs in two clicks; access to major NFT marketplaces.
- **Security Features**: Scam detection, transaction alerts, and self-custodial design (Phantom never has access to funds).

## Market Standing
- **Valuation/Market Cap**: $3 billion (as of Series C announcement in January 2025)
- **Key Metric**: Total funding $150M (Series C, Jan 2025); 15 million+ monthly active users (2025)
- **Notable Investors/Partners**: Sequoia Capital, Paradigm (co-led Series C); a16z crypto, Variant, Jump Capital (prior rounds)
- **Growth Signals**: Team of 100+ remote employees; global offsites twice a year; rapidly growing user base (from 40K beta testers in 2021 to 15M+ in 2025); expansion beyond wallet into broader consumer finance platform

## Competitive Advantages
- **Multichain by design**: One wallet for multiple blockchains eliminates fragmentation.
- **User experience focus**: Clean, intuitive interface that lowers barriers for non‑crypto native users.
- **Self-custodial + security**: Users retain full control; built-in scam detection and 24/7 support.
- **Social money movement**: Unique social features (usernames, profiles) differentiate from traditional wallets.
- **Strong investor backing**: Top‑tier crypto and VC partners provide capital and ecosystem credibility.

## Strategic Focus
- Build the “world’s biggest consumer finance platform” by expanding utility beyond simple wallet functions (e.g., fiat on/off ramps, lending, staking).
- Drive mass adoption through simplicity, design, and accessibility.
- Continue to scale engineering and product teams globally to support a 100% remote, high‑ownership culture.

## Why Work Here
- **Culture**: Fully remote, global team of designers, engineers, and former founders. Values include ownership, speed, and decentralization.
- **Remote/Hybrid**: 100% remote with two global offsites per year to build connection.
- **Perks**: Unlimited PTO, daily meal benefit, monthly wellness benefit, comprehensive health plans, learning & development budget.
- **Engineering Culture**: “Great ideas can come from anywhere”; flat, collaborative environment with real ownership over what you build.
- **Open Roles**: Engineering, product, design, growth, and people operations (see [careers page](https://jobs.ashbyhq.com/phantom)).

## Sources
1. [phantom.com/about](https://phantom.com/about)
2. [phantom.com/careers](https://phantom.com/careers)
3. [phantom.app/en-GB/careers](https://phantom.app/en-GB/careers)
4. [phantom.app/en-GB/](https://phantom.app/en-GB/)
5. [linkedin.com/company/phantomwallet](https://www.linkedin.com/company/phantomwallet)
6. [jobs.ashbyhq.com/phantom](https://jobs.ashbyhq.com/phantom)

## Other roles at Phantom

- [Staff Product Security Engineer (Security)](https://feeny.ai/job/staff-product-security-engineer-security-phantom-remote-2svfvv9crqc7)
- [Staff Engineer, Full Stack (Trust, Safety & Risk)](https://feeny.ai/job/staff-engineer-full-stack-trust-safety-risk-phantom-remote-vds6ksv3myrm)
- [Staff Machine Learning Engineer](https://feeny.ai/job/staff-machine-learning-engineer-phantom-remote-se1wj3nw8bq4)
- [Growth Partnerships Lead](https://feeny.ai/job/growth-partnerships-lead-phantom-united-states-15bap54revc8) — United States
- [VIP Account Manager](https://feeny.ai/job/vip-account-manager-phantom-remote-1xzw4krq0qz3)
- [Senior Software Engineer, Backend (Money Movement)](https://feeny.ai/job/senior-software-engineer-backend-money-movement-phantom-remote-79dnrxak9q2m)
- [Senior Copywriter](https://feeny.ai/job/senior-copywriter-phantom-united-states-jy54ghm0ak46) — United States
- [Staff DevOps Engineer (Platform)](https://feeny.ai/job/staff-devops-engineer-platform-phantom-remote-t7cyynh7ja19)
- [Head of Business and Corporate Development](https://feeny.ai/job/head-of-business-and-corporate-development-phantom-united-states-13ksszxr69qs) — United States
- [Senior Brand Designer](https://feeny.ai/job/senior-brand-designer-phantom-united-states-66xvj7ab5vb8) — United States