Blockchain Security Lead
Job description
About the role
You own the security posture of on-chain systems and protocols across the organization, operating at a strategic level while remaining deeply hands-on. You mentor and grow a small team of blockchain security engineers, guiding their careers and technical development. You partner closely with product and engineering teams to embed security into every architecture and development decision. You define and evolve the blockchain security strategy and roadmap to match business growth and emerging risks. You actively contribute to design reviews, threat modeling sessions, and code audits to ensure robust security outcomes. You build scalable, reusable security controls that allow the business to move quickly without compromising safety. You champion the thoughtful adoption of AI to improve team performance and business outcomes in this role.
Key facts
What you'll do
Lead, mentor, and grow a team of blockchain security engineers to deliver high-quality security outcomes.
Define and evolve the blockchain security strategy and roadmap to align with product and infrastructure goals.
Serve as a trusted security partner to product, protocol, and infrastructure teams across the organization.
Lead threat modeling and architecture reviews for on-chain systems to identify risks early.
Perform and guide security reviews and audits of smart contracts written in Solidity and Rust for Solana.
Perform and guide security reviews and audits of backend services and supporting infrastructure components.
Design and implement reusable security controls, patterns, and reference architectures for common use cases.
Support secure deployment of cloud-native infrastructure including containers and Kubernetes environments.
Research emerging blockchain threats, exploits, and mitigations to keep the organization ahead of risks.
Translate research findings into actionable security controls and process updates for the engineering teams.
Embrace and champion the thoughtful adoption of AI to improve team performance and business outcomes.
Leverage AI tools such as generative AI and automation platforms to improve productivity and decision-making.
Use AI-powered data copilots to enhance output quality and efficiency in day-to-day security activities.
Continuously measure and improve the security posture of on-chain systems across the business.
Requirements
Bachelor's degree in Computer Science, Engineering, or a related field or equivalent experience.
10+ years of security software engineering experience building and reviewing secure systems.
5+ years of hands-on experience working with blockchain technologies and distributed systems.
5+ years of experience working with smart contract security across multiple blockchain chains.
Experience leading or mentoring a small, highly technical team of security or engineering professionals.
Published material on vulnerabilities or security bugs within the Web3 community demonstrating thought leadership.
Expertise in secure software development lifecycle practices, threat modeling, and application architecture review.
Strong understanding of multi agent code reviews for vulnerability detection and secure coding standards.
Ability to work effectively in a fast-paced, high-growth environment with ambiguous challenges.
Excellent written and verbal communication skills for collaborating with cross-functional teams.
Strong problem-solving skills and a proactive approach to identifying and mitigating security risks.
Commitment to maintaining up-to-date knowledge of blockchain security best practices and emerging threats.
Willingness to contribute to on-call responsibilities and respond to security incidents as needed.
Alignment with Galaxy's culture of builders, independent decision-making, and transparent feedback.
Practical notes
The role is fully remote with no specific hours mandated, allowing for flexible scheduling within operational needs. There is no travel requirement specified in the source material, and no visa information is provided. Deadlines for application submission are not mentioned in the source, so candidates should apply as soon as possible to ensure consideration. This position is focused on on-chain security responsibilities and does not include compensation details in the source document. The successful candidate will work within a culture that values speed, ownership, and collaboration with diverse teams across regions.