Chief Information Security Officer

You will own the security strategy and program, assess control gaps, set priorities, and advise leadership on material risks. You will lead incident response, oversee protocol assurance and secure development practices, harden access and infrastructure environments, and work with institutional counterparties on security due diligence.

Responsibilities

• Own the security strategy and program across protocol, infrastructure, applications, internal tools, vendors, and access controls
• Build and run a security risk-management program using recognized frameworks
• Lead security engagement and due diligence with institutional counterparties
• Assess launches and protocol upgrades, including threat models, audits, formal verification, remediation, monitoring, and incident readiness
• Coordinate audit, formal verification, monitoring, and incident-response providers
• Lead security incident response and establish response procedures
• Harden identity, access management, secrets, GitHub, cloud, CI/CD, endpoint, and offboarding practices
• Support wallet, multisig, key-management, and custody security standards
• Produce decision-ready security updates and escalate material issues

Requirements

• 8+ years of security experience with CISO-level accountability
• Experience implementing NIST CSF 2.0 or an equivalent security framework
• Direct security ownership of live on-chain systems or assets
• Knowledge of DeFi lending failure modes and governance attacks
• Ability to evaluate security findings, audit coverage, formal verification coverage, and remediation evidence
• Understanding of smart contract audits, vulnerability management, bug bounties, and secure deployment practices
• Experience hardening cloud, GitHub, CI/CD, identity, access, secrets-management, and endpoint environments
• Experience leading a high-severity security incident response
• Ability to set security strategy and implement controls in a small team