Head of Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Head of Security based in the United States .

As Head of Security, you will take ownership of the security strategy and execution for a high-performance technology infrastructure powering the decentralized ecosystem. This is a hands-on leadership opportunity to establish and strengthen security across cloud infrastructure, production systems, and engineering platforms. You will lead incident response, proactively manage risks, and embed security best practices into engineering workflows. Working closely with executive leadership and engineering teams, you will have significant autonomy to make critical security decisions. You will also build and develop the security function as the organization scales. This role is ideal for an experienced security leader who combines deep technical expertise with strategic thinking and a strong sense of ownership.

Accountabilities:

-

Define and execute the overall security strategy, roadmap, and priorities across infrastructure, cloud environments, and production systems.

-

Establish and continuously improve security controls covering identity and access management, secrets and key management, network segmentation, logging, monitoring, and threat detection.

-

Own the incident response lifecycle, including detection, investigation, mitigation, recovery procedures, runbooks, on-call readiness, and regular tabletop exercises.

-

Develop and maintain threat models and risk registers, identifying vulnerabilities and prioritizing security initiatives according to business impact.

-

Partner with engineering teams to integrate security into development processes, architecture decisions, and deployment workflows without slowing down delivery.

-

Assess and manage third-party, vendor, and software supply-chain security risks.

-

Lead the compliance roadmap, coordinate security audits, and manage customer security assessments and reviews.

-

Build, hire, mentor, and develop the security team as the organization grows.

-

Communicate security risks, incidents, and mitigation strategies clearly to executives, engineers, and external stakeholders.

-

Provide hands-on technical leadership, independently investigating systems, implementing security improvements, and addressing critical vulnerabilities.

Requirements:

-

At least 8 years of professional experience in cybersecurity, including securing high-availability, internet-facing infrastructure at scale.

-

Strong engineering background, with the ability to read and write code, investigate complex systems, and implement technical security solutions independently.

-

Deep expertise in cloud security, bare-metal infrastructure, production environments, and distributed systems.

-

Proven hands-on experience in security monitoring, threat detection, incident response, and leading the response to real-world security incidents.

-

Demonstrated experience establishing a security program from the ground up or significantly scaling an existing security function.

-

Previous experience securing developer-focused products, APIs, platforms, or critical technology infrastructure.

-

Strong knowledge of identity and access management, secrets management, cryptographic keys, and infrastructure security practices.

-

Ability to develop pragmatic security strategies, assess complex risks, and make sound decisions under pressure.

-

Excellent communication and collaboration skills, with the ability to influence engineering teams and balance security requirements with business priorities.

-

High ownership mentality, adaptability, and willingness to remain hands-on in a fast-moving environment.

-

Comfortable working within a fully remote, asynchronous organization.

-

Experience leading SOC 2 or comparable compliance audits and previous security leadership experience in a high-growth startup environment are strong advantages.

Benefits:

-

Competitive, market-leading salary.

-

Meaningful equity participation.

-

Fully remote working environment with flexibility to work from wherever you are most effective.

-

Generous vacation policy.

-

Wellness budgets to support personal well-being.

-

Learning and professional development support.

-

Travel opportunities and support for team collaboration.

-

Opportunity to work on high-impact infrastructure supporting applications used by millions across the decentralized technology ecosystem.

-

Significant ownership and influence over technical architecture, security strategy, and organizational growth.

-

Opportunity to work alongside a small, experienced, and ambitious engineering team.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1