The Role

Responsibilities

Own and develop security posture, tools, and strategy for application-level systems: web apps, APIs, and Smart Contracts
Perform threat modeling, architecture reviews and design reviews for new features, services and protocols
Monitor and respond to application-level security incidents
Stay abreast of emerging threats relevant to our stack and proactively apply mitigations
Educate teams across the company on security best practices

Must Have

Deep hands-on application security experience in production Web3 environments
Experience securing and monitoring crypto keys and safes
Experience performing threat modeling, architecture risk assessments and application vulnerability management
Deep understanding of web application and blockchain security
Familiarity with cloud-native infrastructure/applications and ability to secure them end-to-end
Strong ability to review and write secure code
Excellent written and verbal communication
Comfortable operating in a high-autonomy, high-velocity team

Preferred

Familiarity with machine-learning infrastructure or distributed systems
Experience with threat-hunting, adversary simulation, or advanced persistent-threat (APT) mitigation
Open source security tooling contributions or public writing about application security

Nice to Have

Familiarity with GPU/accelerator environments, large-scale model-training workflows, or supply-chain risks in ML/AI

Competitive salary + share of equity and token pool
Fully remote work- we currently hire between the West Coast (PT) and Central Europe (CET) time zones
Visa sponsorship -available for those who would like to relocate to the US after being hired
3-4x all expenses paid company retreats around the world, per year
Whatever equipment you need
Paid sick leave and flexible vacation
Company-sponsored health, vision, and dental insurance- including spouse/dependents [🇺🇸 only]

Autonomy & Independence

Don’t ask for permission - we have a constraint culture, not a permission culture.
Claim ownership of any work stream and set its goals/deadlines, rather than waiting to be assigned work or relying on job specs.
Push & pull context on your work rather than waiting for information from others and assuming people know what you’re doing.
Communicate to be understood rather than pushing out information and expecting others to work to understand it.
Stay a small team - misalignment and politics scale super-linearly with team size. Small protocol teams rival much larger traditional teams.

Rejection of mediocrity & high performance

Give direct feedback to everyone immediately - rather than avoiding unpopularity, expecting things to improve naturally, or trading short-term pain for extreme long-term pain.
Embrace an extreme learning rate - rather than assuming limits to your ability / knowledge.
Don’t quit - push to the final outcome, despite any barriers.
Be anti-fragile - balance short-term risk for long-term outcomes.
Reject waste - guard the company’s time, rather than wasting it in meetings without clear purpose/focus, or bikeshedding.