Ondo Finance

Design and implement low-latency backend systems and APIs for trading venues ensuring data integrity and collaboration with trading teams. | 4+ years backend experience with Go or Rust and deep knowledge of distributed systems and high-throughput production services. | About the company Hi, we're Ondo Finance. Our mission is to provide institutional-grade, blockchain-enabled investment products and services. We have both a technology arm that develops decentralized finance technology, and an asset management arm that creates and manages tokenized funds. We were the first company to tokenize exposure to US Treasuries, and have since expanded into several other assets. We are also focused on incubating protocols that can support both tokenized real-world assets and traditional crypto. Founded by folks from Goldman Sachs Digital Assets Team, we’re backed by some of the best investors in the world including Founders Fund, Coinbase Ventures, Pantera Capital, Tiger Global, and more. We are currently the leaders in the space in terms of AUM and are well capitalized to continue growing the firm. We're fully remote, with team members across the U.S. About the role As a Backend Engineer on Ondo's market making team, you'll build and scale the infrastructure behind our trading stack - real-time systems that quote and hedge tokenized markets 24/7 across on-chain and traditional venues. This is a small, senior team, working in Rust and Go, with high ownership over live production risk. You'll work across systems that manage pricing, execution, and PnL accounting, integrating market data from both traditional venues and on-chain sources. You'll collaborate closely with the trading and infrastructure teams to define robust interfaces and deliver systems that hold up under real-time, high-throughput conditions. This is a rare opportunity to build at the intersection of Web2 and Web3, in a fast-paced, high-ownership environment. Responsibilities Design and implement low-latency backend systems and APIs for quoting, hedging, and executing across on-chain and traditional trading venues. Collaborate with the trading team to define interfaces and workflows between pricing, execution, and market data services. Own integrations with market data providers, exchanges, and on-chain venues, including feed handling and order execution. Build reconciliation and data-integrity tooling so positions, fills, and PnL stay consistent across live trading state. Establish and enforce backend engineering standards, best practices, and security protocols across the stack. Participate in code reviews and architecture discussions, contributing to a culture of engineering excellence. Requirements 4+ years of backend software engineering experience, with strong programming ability in Go or Rust, and willingness to work in both. Strong understanding of distributed systems, system design, and building services that run under real-time or latency-sensitive conditions. Experience integrating with cloud infrastructure (AWS preferred), third-party services, and high-throughput, production-critical systems. Demonstrated interest in Web3, DeFi, or trading systems—whether through professional experience or side projects. Familiarity with market microstructure or order execution is a plus, but not required. Comfort operating in a fast-moving startup environment with high ambiguity and high ownership over live production risk. Nice to haves Experience with market data providers and protocols (Databento, SIP/prop equity feeds, venue WebSocket APIs). Prior work on trading systems, execution infrastructure, or market data infrastructure at a trading firm, exchange, or broker. Exposure to crypto venues and on-chain trading. What we offer • Competitive compensation including salary, future token rights, and/or equity (according to your preferences) — we're well-funded and believe that great talent deserves great compensation • Full benefits (medical, vision, and dental) and flexible vacation policy (PTO) • Small remote-first team across many countries — you'll be an early team member helping shape our vision, culture, and design practices • A+ colleagues — our team includes alumni from: Goldman Sachs, Blackrock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, Pinterest, McKinsey, Circle, Uniswap, Phantom • Best-in-class investors — we are proud to be backed by leading crypto experts and VCs, including Pantera Capital, Founders Fund and Coinbase Ventures

Build and iterate on growth product experiences collaborating with cross-functional teams to drive measurable business impact. | 4+ years full-stack development with React, Next.js, TypeScript, strong AWS serverless, data modeling, and product analytics skills. | About Ondo Capital markets are moving onchain. Ondo Finance is building the products and infrastructure that will bring them there. We create institutional-grade, blockchain-enabled investment products and services, including tokenized treasuries, tokenized stocks and ETFs, and new trading experiences built for global, always-on markets. We are the category leader by AUM, well-capitalized, and backed by investors including Founders Fund, Coinbase Ventures, Pantera Capital, and Tiger Global. The underlying financial infrastructure is complex. We believe discovering, understanding, and using it should not be. About the Web team The Web team owns the product layer between Ondo's financial infrastructure and its users. We build the experiences through which people discover our products, onboard, move money, trade Ondo Stocks and Ondo Perps, manage their portfolios, and return as their needs evolve. Our work spans public websites, product applications, APIs, content systems, analytics, and third-party platforms. A single user journey can cross education, identity and compliance, market data, backend services, and onchain transaction state. Our job is to make that journey feel coherent—and to understand where it does not. Engineering on this team is distinguished by: Users first. We work backward from direct conversations, qualitative research, behavior, and product data. Metrics tell us what happened; understanding users helps us decide what to build. End-to-end ownership. There is no handoff between identifying an opportunity and delivering the result. The person who understands the problem helps shape, build, launch, measure, and improve the solution. Speed with confidence. We scope aggressively, ship thoughtfully, and invest in the tests, instrumentation, and operational tooling that let us learn quickly without lowering the quality bar. High agency and low ego. We improve the product without waiting to be asked, invite strong critique, share what we learn, and make the people around us more effective. About the role As a Full-Stack Engineer focused on Growth, you will own product initiatives across Ondo Stocks and Ondo Perps that help more users discover, understand, adopt, and return to our products. This is a product engineering role with a growth mandate—not a traditional marketing role. You might investigate where users abandon an onboarding flow, talk with them to understand why, redesign the experience, instrument the new journey, build the APIs and integrations behind it, and use the results to decide what should change next. You will move between customer-facing product experiences, backend systems, analytics and experimentation, content systems, and third-party platforms. You will work closely with Product, Design, Marketing, Data, and other engineers, but you will often be the person who turns an ambiguous growth opportunity into a concrete product and technical direction. The goal is not to run experiments for their own sake. It is to develop a sharper understanding of our users and turn that understanding into durable product improvements and measurable business impact. What you'll do Own high-impact growth initiatives across discovery, acquisition, activation, engagement, and retention—from problem definition and technical design through launch, measurement, production operation, and iteration. Build fast, polished product and marketing experiences, along with the backend systems, data models, and integrations that make them work. Work directly with users and analyze product journeys, funnels, and qualitative feedback to identify friction, form clear hypotheses, and choose the highest-leverage opportunities. Design thoughtful experiments with credible success criteria, clean instrumentation, and a plan for turning what we learn into lasting product improvements. Partner with Product, Design, Marketing, and Data on launches, lifecycle experiences, localization, content systems, and new ways to grow Ondo Stocks and Ondo Perps. Improve organic discovery and conversion through technical SEO and AEO, performance, structured content, and clear user journeys. Raise the level of the team through clear writing, thoughtful code review, strong operational ownership, and effective use of modern AI engineering tools. What you bring 4+ years of experience building and operating production full-stack applications with React, Next.js, and TypeScript. Experience driving measurable acquisition, activation, engagement, or retention outcomes through growth engineering, product-led growth, consumer product, ecommerce, or similarly data-informed product work. Experience building and operating serverless systems on AWS, including Lambda and adjacent services such as API Gateway, EventBridge, or SQS. Strong experience using BigQuery and product analytics data to model funnels, investigate user behavior, and measure product and business impact. Strong fundamentals in API and data-model design, relational databases, event-driven systems, event instrumentation, experimentation, testing, and observability. A record of owning product work end to end—not only implementing experiments or specifications handed to you. Product taste: you can find the simplest experience that solves the user's problem without ignoring the complexity or edge cases underneath it. Data fluency and intellectual honesty. You can define useful metrics, distinguish signal from noise, and change direction when the evidence challenges your hypothesis. The ability to communicate clearly, learn unfamiliar domains quickly, and create alignment across engineering, product, design, marketing, and data partners. High agency and low ego. You move important work forward, invite strong critique, and care more about the outcome than whose idea wins. Preferred qualifications Experience building fintech, trading, crypto-native, or other high-consideration products where earning user trust is essential. Experience with lifecycle marketing, CRM, CMS, experimentation, localization, or analytics platforms. Familiarity with AEO, structured content, international SEO, and growth across multiple regions or languages. Experience applying AI to prototyping, personalization, analytics, content operations, or other growth workflows. We do not expect every strong candidate to arrive with deep crypto or every growth specialty listed above. We do expect curiosity, strong product and engineering fundamentals, and the ability to turn learning into shipped improvements quickly. What we offer Challenging, high-impact work helping define how a global audience discovers and adopts a new category of financial products. Competitive compensation including salary, future token rights, and/or equity, according to your preferences. Full medical, vision, and dental benefits, plus a flexible vacation policy. A remote-first environment with meaningful autonomy and influence over product and technical direction. Exceptional colleagues from Goldman Sachs, BlackRock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, McKinsey, Coinbase, Circle, and Uniswap. Backing from leading crypto experts and investors, including Pantera Capital, Founders Fund, and Coinbase Ventures.

Own compliance-focused product areas including onboarding, identity verification, and transaction monitoring by building interfaces and backend services. | Requires 4+ years full-stack experience with React, Next.js, Node.js, TypeScript, strong API design, and compliance-related workflows. | About Ondo Capital markets are moving onchain. Ondo Finance is building the products and infrastructure that will bring them there. We create institutional-grade, blockchain-enabled investment products and services, including tokenized treasuries, tokenized stocks and ETFs, and new trading experiences built for global, always-on markets. We are the category leader by AUM, well-capitalized, and backed by investors including Founders Fund, Coinbase Ventures, Pantera Capital, and Tiger Global. The underlying financial infrastructure is complex. We believe the product experience should not be. About the Web team The Web team owns the product layer between Ondo's financial infrastructure and its users. We build the experiences through which people onboard, establish eligibility, move money, trade Ondo Stocks, mint and redeem OUSG and USDY, manage their portfolios, and interact with products across multiple blockchains. A single user action can cross identity and compliance systems, market data, backend services, smart contracts, vendor APIs, and asynchronous transaction state. Partial failures are normal; user trust is not optional. Our job is to absorb that complexity and produce experiences that feel clear, coherent, and dependable while giving internal teams the controls and evidence they need. Engineering on this team is distinguished by: Product taste. Engineers help define the experience. We simplify difficult workflows without erasing the regulatory, security, or operational details that matter. End-to-end ownership. There is no frontend/backend handoff. The person who understands the problem helps shape, build, launch, observe, and improve the solution. Speed with confidence. We scope aggressively, ship thoughtfully, and invest in the tests, instrumentation, and operational tooling that let us keep moving without lowering the quality bar. Security and correctness. We build products that move money and handle sensitive data. Access control, auditability, privacy, and failure behavior begin in the design—not at the end of the project. High agency and low ego. We improve the product without waiting to be asked, invite strong critique, communicate clearly, and make the people around us more effective. About the role As a Full-Stack Engineer focused on Compliance, you will own a critical product area spanning customer onboarding, identity verification, KYC/KYB, compliance reviews, transaction monitoring, and the internal tools our Operations and Compliance teams use every day. This is a product engineering role in a regulated domain. You might trace a customer blocked in onboarding across the interface, vendor responses, decision logic, and operational workflow; redesign the experience; improve the data model and audit trail behind it; and work directly with operators to understand what should change next. You will move between React and Next.js interfaces, TypeScript and Node.js APIs, data workflows, and third-party integrations. You will work closely with Compliance, Legal, Risk, Operations, Product, and Design, but you will often be the person who turns an ambiguous policy or operational problem into precise product behavior and a durable technical design. The best solution is rarely the most elaborate one. We are looking for an engineer who can understand the rule, risk, and user need; identify the invariants that must hold; and build the simplest system that is secure, explainable, and resilient in production. What you'll do Own compliance-focused product areas from problem definition and architecture through implementation, launch, production operation, and iteration. Build clear, maintainable interfaces with React, Next.js, and TypeScript, along with the Node.js APIs, data models, workflows, and integrations that make them work. Turn complex regulatory and operational requirements into intuitive, testable product behavior for customers and internal users. Integrate identity, sanctions, blockchain analytics, fraud, and case-management providers while maintaining strong data quality, privacy, observability, and auditability. Design for real-world failure modes, including delayed and reordered vendor events, manual review, partial outages, retries, and conflicting state across systems. Work directly with Compliance, Legal, Risk, Operations, Product, Design, and users to understand the domain and make sound product and technical tradeoffs. Apply AI and machine learning where they can safely reduce manual work or improve decision support, with appropriate security, human review, explainability, and audit trails. Raise the level of the team through clear design work, thoughtful code review, strong operational ownership, and effective use of modern AI engineering tools. What you bring 4+ years of experience building and operating production full-stack applications with React, Next.js, Node.js, and TypeScript. Strong fundamentals in API and data-model design, relational databases, distributed systems, cloud infrastructure, testing, observability, and third-party integrations. Hands-on experience building KYC/KYB, identity verification, onboarding, or similarly sensitive workflows, with a strong understanding of access controls, data protection, auditability, and secure system design. A record of owning complex product work end to end—not only implementing requirements handed to you. Product and technical judgment: you can translate ambiguous policy into precise system behavior, identify consequential edge cases, and make pragmatic tradeoffs without compromising critical controls. High standards for security, correctness, reliability, usability, and maintainability. The ability to communicate clearly, learn unfamiliar domains quickly, and create alignment across technical, legal, compliance, and operational partners. High agency and low ego. You move important work forward, invite strong critique, surface risk early, and care more about getting the system right than being right. Preferred qualifications Familiarity with financial-crime controls and frameworks such as BSA/AML, OFAC, FinCEN, KYC/CDD, SEC, or FATF. Experience building fintech, payments, trading, crypto, or other products where correctness, trust, and regulatory obligations are essential. Experience with systems that combine offchain identity and compliance data with onchain activity. Experience supporting audits, regulatory examinations, control testing, or compliance reporting. Experience applying AI or machine learning to regulated operational workflows. We do not expect every strong candidate to know every framework or arrive with deep crypto experience. We do expect curiosity, sound engineering judgment, respect for the domain, and the ability to become effective in unfamiliar regulatory and technical terrain quickly. What we offer Challenging, high-impact work building the trust and control layer for a new category of financial infrastructure. Competitive compensation including salary, future token rights, and/or equity, according to your preferences. Full medical, vision, and dental benefits, plus a flexible vacation policy. A remote-first environment with meaningful autonomy and influence over product and technical direction. Exceptional colleagues from Goldman Sachs, BlackRock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, McKinsey, Coinbase, Circle, and Uniswap. Backing from leading crypto experts and investors, including Pantera Capital, Founders Fund, and Coinbase Ventures.

Own product security lifecycle including threat modeling, secure code reviews, and bug bounty management. | 5+ years in product or application security with proficiency in TypeScript, Python, or Go and expertise in threat modeling. | About Ondo Ondo Finance is building institutional-grade financial infrastructure for tokenized real-world assets. We operate at the intersection of traditional finance and on-chain systems, which means our product surface has to hold up against both the ordinary threats that hit any high-value fintech and the specific ones that follow value on-chain. About the Role We are hiring a Senior Security Engineer - Product Security to own how we ship secure products at Ondo. You will be a security partner for our product engineering teams, driving threat modeling, owning secure code reviews for new products or feature expansions, maintaining and tuning AppSec tooling, and improving the existing SSDLC. You can expect to take ownership of the bug bounty program, new feature to existing product reviews, and similar broad ownership of critical functions paired to a dedicated ProdSec lead. An AI-native approach is welcome, paired with AI-driven approaches should expect to be justified by describing how doing so enables risk outcomes. This is a hands-on IC role. You will read code, run threat models, review architecture proposals, own tooling, and push engineering teams to build products that are secure by default. You partner closely with adjacent security function like AppSec, Infrasec, and SecOps. What You’ll Do Drive threat modeling for new features, integrations, and architectural changes across the product surface. Push threat models past templates into decisions that engineering teams actually implement. Own secure code review for high-risk changes — authentication, session management, cryptographic paths, wallet and signing flows, RPC and third-party integrations, permission and consent surfaces. Expand the AppSec tooling stack and treat “reducing false positives” as a first-class deliverable. AI-native integrations are welcome. Design and evolve our secure SDLC: where security fits in the dev workflow, what triggers a review, what a lightweight security sign-off looks like versus a full one, and how do we validate controls. Run our responsible disclosure and bug bounty program. Set scope, triage inbound reports, decide payouts, and drive findings to closure with engineering. Support and own appropriate scope for the intake and closure of findings from external audits and pentests — coordinate with audit vendors (Coinspect, Cantina, NCC Group, and others), organize findings into our internal risk register, and drive remediation with engineering owners. Partner with engineering leads to align o secure-by-default patterns - libraries, templates, sensible defaults, and paved-road implementations of anything security-relevant. Threat model blockchain-integrated components like wallet flows, RPC integrations, signing infrastructure, on-chain admin actions triggered from off-chain systems in partnership with engineers who own the on-chain code. Contribute to hiring, mentoring, and pushing the technical bar on the Security team. What We’re Looking For 5+ years in Product Security or Application Security, including senior IC time at a fast-moving product company. Deep secure code review skills in at least one modern stack (TypeScript / JavaScript, Python, or Go). Ability to move across stacks at the level required to threat model. Strong threat modeling skills, appropriate to experience - you can drive a real threat model with an engineering team, not just fill in a template. In practice, we look for core understanding of industry-relevant TTPs and IoCs and strong intuitions on how to apply those lessons learned to our products. Practical experience owning or majorly contributing to an AppSec tooling program. You have shipped rules, tuned noise, and measured impact. Comfortable running or building a bug bounty / responsible disclosure program end-to-end assuming properly resourced to do so. Strong working knowledge of modern web and API security - session and auth flows, OAuth and OIDC, browser security model, common web/API vulnerability classes, and their less-common variants. Comfortable reading Terraform, cloud IAM policies, and CI/CD configuration well enough to reason about how a product vulnerability crosses into an infra risk. Strong engineering partnership skills - you engage constructively, understand the “why” before proposing risk controls, you know when to accept risk, and you write things down. Willing to grow into blockchain-adjacent product security on the job, including the specific attack surface introduced by wallet, signing, and on-chain-integration code. Blockchain Exposure Note This role firmly lives in Web2 prodsec. But, it also requires someone who understands what “Web2 vs Web3” terminology means. In other words, how our products interact with blockchains creates unique threat models that all product security teammates must grasp. At a minimum, by Day 1 you should have strong intuitions about how blockchains will make your prodsec experience unique, you should grasp the common terminologies, and you should be able to discuss with colleagues several incident post-mortems that demonstrate how Web2 compromises lead to Web3 funds losses. You do not need to be an expert in smart contract auditing, blockchain security architectures, or decentralized consensus-driven risk controls. Nice to Have Prior work at a crypto, fintech, or other company where products handle high-value or irreversible actions. Familiarity with wallet, signing, or key-management flows. Reading-level familiarity with Solidity or Rust, target: when ProdSec intersects with smart contracts or other on-chain applications, you can parse what the code is likely doing, and work with blockchain security subject matter experts from there. Bug bounty history - reports, CVEs, or published write-ups. Familiarity with browser-extension security, mobile app security, or account-abstraction wallet designs. Public output - talks, blog posts, open-source tools, CVEs. How We Work The Security team values a high trust team environment where respectful candor can thrive. We expect senior engineers to have an opinionated take on how to accomplish a task, accept feedback from the team and other external stakeholders and return it in kind, and to always assume positive intent. Professionalism, ethics, and enabling stakeholders towards common goals are important always.