Head of Security

📋 Description

• Define and own a risk-based security strategy for a financial platform; prioritize investment by
• Own detection, response, and recovery for security incidents; maintain runbooks, lead incidents and
• Embed security into the SDLC with threat modeling, secure design reviews, SAST/DAST/dependency
• Partner with Infrastructure to harden AWS, Kubernetes, networking, and CI/CD pipelines; own IAM and
• Build the detection and alerting capability that finds malicious activity early, across
• Own the security model for key management, wallet and custody operations, and the blockchain

🎯 Requirements

• 8+ years of experience in information or application security, including 3+ years leading security
• Demonstrated experience leading incident response for real, high-stakes incidents, including
• Strong knowledge of AWS security and Kubernetes security (IAM, network segmentation, RBAC, secrets
• Hands-on experience with application security in a microservices environment: threat modeling
• Experience building detection and monitoring capabilities (SIEM, log analysis, alerting; Datadog or
• Experience owning or leading a compliance program such as SOC 2, ISO 27001, or PCI-DSS, including