Head of Security

Accountabilities:

• Define and execute the overall security strategy, roadmap, and priorities across infrastructure, cloud environments, and production systems.

• Establish and continuously improve security controls covering identity and access management, secrets and key management, network segmentation, logging, monitoring, and threat detection.

• Own the incident response lifecycle, including detection, investigation, mitigation, recovery procedures, runbooks, on-call readiness, and regular tabletop exercises.

• Develop and maintain threat models and risk registers, identifying vulnerabilities and prioritizing security initiatives according to business impact.

• Partner with engineering teams to integrate security into development processes, architecture decisions, and deployment workflows without slowing down delivery.

• Assess and manage third-party, vendor, and software supply-chain security risks.

• Lead the compliance roadmap, coordinate security audits, and manage customer security assessments and reviews.

• Build, hire, mentor, and develop the security team as the organization grows.

• Communicate security risks, incidents, and mitigation strategies clearly to executives, engineers, and external stakeholders.

• Provide hands-on technical leadership, independently investigating systems, implementing security improvements, and addressing critical vulnerabilities.

Requirements:

• At least 8 years of professional experience in cybersecurity, including securing high-availability, internet-facing infrastructure at scale.

• Strong engineering background, with the ability to read and write code, investigate complex systems, and implement technical security solutions independently.

• Deep expertise in cloud security, bare-metal infrastructure, production environments, and distributed systems.

• Proven hands-on experience in security monitoring, threat detection, incident response, and leading the response to real-world security incidents.

• Demonstrated experience establishing a security program from the ground up or significantly scaling an existing security function.

• Previous experience securing developer-focused products, APIs, platforms, or critical technology infrastructure.

• Strong knowledge of identity and access management, secrets management, cryptographic keys, and infrastructure security practices.

• Ability to develop pragmatic security strategies, assess complex risks, and make sound decisions under pressure.

• Excellent communication and collaboration skills, with the ability to influence engineering teams and balance security requirements with business priorities.

• High ownership mentality, adaptability, and willingness to remain hands-on in a fast-moving environment.

• Comfortable working within a fully remote, asynchronous organization.

• Experience leading SOC 2 or comparable compliance audits and previous security leadership experience in a high-growth startup environment are strong advantages.

Benefits:

• Competitive, market-leading salary.

• Meaningful equity participation.

• Fully remote working environment with flexibility to work from wherever you are most effective.

• Generous vacation policy.

• Wellness budgets to support personal well-being.

• Learning and professional development support.

• Travel opportunities and support for team collaboration.

• Opportunity to work on high-impact infrastructure supporting applications used by millions across the decentralized technology ecosystem.

• Significant ownership and influence over technical architecture, security strategy, and organizational growth.

• Opportunity to work alongside a small, experienced, and ambitious engineering team.