Head of Security / OpSec Specialist

About the Company Our client is a DeFi-native security protocol dedicated to protecting Web3 ecosystems from exploits and vulnerabilities. They work with leading protocols to audit smart contracts, structure coverage, and respond to security incidents — sitting at the intersection of on-chain security and institutional-grade risk management. The Role They're looking for a seasoned security operator who has lived and breathed both Web2 infrastructure security and the unique threat landscape of Web3. You'll own internal security posture end-to-end from hardening operational systems to advising on threat models that span on-chain and off-chain vectors. This is not a purely advisory role; you'll roll up your sleeves and build. What You'll Do - Own and continuously evolve internal OpSec policies, processes, and tooling - Audit and harden infrastructure across cloud, endpoint, network, and identity - Build and run incident response playbooks for both Web2 and Web3 attack surfaces - Assess third-party integrations and vendor security posture - Advise internal teams on security-conscious development and operational practices - Stay ahead of emerging threats in the DeFi and broader crypto security space What We're Looking For - Proven background in Web2 security pretesting, red teaming, SecOps, or equivalent - Hands-on experience designing and enforcing OpSec frameworks at an organisational level - Significant Web3 exposure ideally having served as Head of Security or equivalent at a protocol, foundation, or major DeFi project - Deep understanding of on-chain attack vectors: key management, wallet security, multisig hygiene, smart contract risk - Ability to translate complex security posture into clear communication for non-technical stakeholders - Comfortable operating autonomously in a lean, fast-moving team Nice to Have - Experience with audit firms or security research - Background in bug bounty programs or responsible disclosure - Familiarity with coverage/insurance structures in DeFi - Security certifications (OSCP, CISSP, CEH or equivalent)