Security Architect

You'll join a small, senior security team. No checkbox security, no bureaucracy — just real problems and the ownership to solve them. Plan and execute projects to evolve and upgrade our defenses or create new ones.

Responsibilities

Join a small, senior security team; Plan and execute projects to evolve and upgrade our defenses or create new ones; Sometimes set the right rule for "can I share this document"; Sometimes respond to an attack by a state sponsored actor; Participate in on-call rotation; Help protect a firm that moves billions a day

Requirements

5+ years of cybersecurity and devops or relevant experience; Familiarity with software development security: pipelines, artifact registries, supply chain attacks, dependency confusion, slopsquatting; Hands-on Cloud security; Solid, hands-on experience with AI tooling and their risks; Current on the threat landscape: you know what's being exploited now, what defenses are effective, and what's still hype; Clear, structured thinking about risk — threat modeling, prioritization, communicating tradeoffs to non-security people; Self-directed. Manager of one https://signalvnoise.com/posts/1430-hire-managers-of-one.

Nice to have

First hand experience with incident response; Understanding of crypto fundamentals, — not necessarily a developer, but you need to reason about the risk surface; DeFi experience and understanding; Experience in trading, fintech, or any environment where security controls must coexist with latency requirements; Hands-on Google Workspace security; 10+ years of cybersecurity and devops or relevant experience; smart contracts, and L2 protocols; Has personally owned cloud security at a real production scale (AWS)