The Opportunity

As the Web3 Security Lead, you will own the defense and resiliency of our blockchain infrastructure, smart contracts, institutional wallets, digital asset operations, and custody environment. Beyond on-chain defense, you will also play a pivotal role in driving broader cloud and corporate cybersecurity initiatives across the company.

You will work cross-functionally with Engineering, Product, Operations, Risk, Compliance, and IT teams, alongside external security partners, to ensure that military-grade security is natively embedded into all digital asset products and operational processes. This role is ideal for an expert who manages Web3 security across private and public chains, understands traditional enterprise cybersecurity models, and is energized by building secure, institutional-grade financial infrastructure.

Key Responsibilities

1. Core Web3 Security & Monitoring

• Posture Ownership: Design, monitor, and continuously improve the organization’s Web3 security posture across development operations (DevSecOps), wallet/multi-sig structures, key management systems, transaction controls, and protocol integrations.

• Infrastructure Defense: Continually assess, scale, and mature logging, monitoring, vulnerability management, operational security controls, and incident response playbooks across our AWS production environments.

• Governance & Permissions: Review and strengthen on-chain transaction approval workflows, signer governance, operational hot/cold wallet security, smart contract permissions, and privileged access management (PAM).

• Threat Detection & Incident Response: Lead the integration of advanced Web3 security vendors and monitoring platforms (e.g., Blockaid, Hypernative) to detect, investigate, contain, and remediate on-chain threats and suspicious activity in real time.

• New Product Security: Act as the primary security stakeholder for new product rollouts, tokenized vehicles, and blockchain integrations, ensuring proactive threat modeling and risk mitigation.

2. Auditing, Risk, & Corporate Cybersecurity Support

• Audit Coordination: Support Web3 regulatory and institutional readiness by coordinating third-party smart contract audits and tracking technical remediation activities.

• Third-Party Risk Assessment: Conduct rigorous security reviews and ongoing security assessments of external vendors, digital asset custodians, exchanges, and third-party infrastructure providers.

• Cross-Functional Technology Risk: Deliver deep technical support for company-wide technology risk assessments, business continuity/operational resilience exercises, and executive security reporting.

• Enterprise Security Support: Assist in hardening security baselines across corporate cloud networks, applications, identity/access management (IAM), endpoints, and internal SaaS systems.

Requirements & Qualifications

Minimum Qualifications:

• Experience: 5+ years of dedicated professional experience in cybersecurity, including at least 2+ years specializing in blockchain technology, digital assets, smart contract auditing, custody systems, or Web3 infrastructure defense.

• Domain Expertise: Deep structural understanding of smart contract lifecycles, cryptographic wallets, custody architectures, multi-sig setups, public/private blockchain infrastructure, and common Web3 attack vectors.

• Tooling Familiarity: Practical exposure to Web3 security monitoring, tracking, or custody tools such as Hypernative, Blockaid, Chainalysis, Fireblocks, BitGo, SAFE, or equivalent enterprise platforms.

• Ecosystem Exposure: Experience navigating Ethereum, EVM networks, stablecoin mechanics, tokenized financial assets, or institutional digital asset transaction processing platforms.

• Cloud Infrastructure: Proven hands-on experience working securely with cloud computing environments (specifically AWS) and modern SaaS architectures.

• Soft Skills: Strong cross-functional communication and stakeholder management skills; capable of operating efficiently within a fast-moving, collaborative fintech environment.

Nice-to-Have Attributes:

• Direct experience collaborating with external smart contract auditors, global financial regulators, institutional banking clients, or enterprise risk management teams.

• Recognized professional security certifications (e.g., CISSP, CISM, CISA) or specialized blockchain security credentials.

What We Offer (Benefits & Perks)

• Competitive Remuneration: A highly competitive package aligned with top-tier global Web3 and DeFi standards.

• Front-Row Seat to Innovation: A rare opportunity to shape the security paradigm of a leading institutional RWA platform alongside domain-expert founders.

• Flexible Culture: A highly collaborative, high-trust team environment with flexible hybrid working arrangements.

• Comprehensive Health & Wellness: Premium corporate healthcare packages and ongoing wellness support.