Head of Security (DeFi)

About Our Client:
Their mission is to aggregate everything — to build the best decentralized platform, and the largest community in crypto. With billions in trading volume flowing through our platform daily, security is our absolute top priority.

About The Role

As Security Lead, you'll oversee security for all the project's assets, systems, data, and infrastructure, to ensure secure operation of the user-facing application and backend operations. You'll handle everything from infrastructure hardening, managing access keys to keeping their funds, devices and accounts safe from threats.

Responsibility

• Infrastructure Security: Conduct comprehensive security assessments of Web 2.0 applications, infrastructure, policies and processes, and implement security and defense-in-depth controls to prevent and limit vulnerabilities

• Proactively monitor and assess exposed surfaces and systems, using vulnerability scanning tools and eliminating exploitable vulnerabilities and single points of failure.

• Coordinate with various teams, directing the engineering in all things security to upload the highest standards.

• Collaborate with external providers to plan and oversee penetration tests, ensuring identified vulnerabilities are prioritised and addressed.

• Integrating security measures into our product development cycle.

• Develop security tooling and developer workflows to aid in the early detection of vulnerabilities.

• Access Security: Actively improve access management processes, focusing on secure ways to store and share sensitive keys, structuring multisigs to prevent single point of failures and managing team members’ access.

• Incident Response: Lead the investigation, containment, and resolution of security incidents and conduct postmortems to identify root causes and establish preventive measures.

• Security Education: Keep up with emerging security threats (example), train team members on security best practices and run regular company-wide security drills.

Requirements

• 5+ years of experience in a senior security management role, with a demonstrable track record of implementing security frameworks at scale.

• Proven experience implementing and maintaining security systems and managing security audits and risk assessments

• Prior experience in managing incident response processes.

• Strong understanding of security tools and methodologies, including their practical application in dynamic environments.

• Strong leadership and communication skills, with the ability to collaborate with cross-functional teams, effectively.

• Good to Have: Relevant cybersecurity certifications such as CISSP or CISM.

• Good to Have: Deep cryptocurrency DeFi industry knowledge.