Senior Information Security Engineer / Head of Security (DeFi & Perp DEX Infrastructure)

About Us We are building the next generation of decentralized finance infrastructure, enabling builders, protocols, and communities to launch their own perpetual decentralized exchanges (Perp DEXs) in minutes. By abstracting away complex smart contract architecture, matching engines, and liquidity layers, we empower teams to go to market rapidly without compromising on performance or security. As our platform scales, we are looking for a seasoned Information Security Engineer / Head of Security to safeguard our core infrastructure, smart contracts, and client deployments. Role Overview You will own the end-to-end security posture of our platform. Because our product enables third parties to spin up high-throughput trading venues, security is our highest priority. You will be responsible for securing cloud infrastructure, automated deployment pipelines, APIs, off-chain matching engines, and on-chain smart contracts against evolving Web3 and traditional cyber threats. Key Responsibilities • Infrastructure & Cloud Security: Architect, implement, and monitor security controls across our cloud environments (AWS/GCP), Kubernetes clusters, CI/CD pipelines, and automated DEX deployment engines. • Application & API Security: Conduct regular threat modeling, code reviews, and penetration testing on our backend services, SDKs, front-end interfaces, and off-chain order-matching systems. • Smart Contract & Protocol Security: Collaborate closely with protocol engineers and external auditing firms to review Solidity/Rust smart contracts, oracle integrations, and cross-chain bridges. • Key Management & Access Control: Design and enforce strict cryptographic key management protocols (HSMs, MPC, multi-sig governance) and Zero-Trust internal access policies. • Incident Response & Threat Intelligence: Lead our 24/7 security monitoring, vulnerability management, and incident response (IR) playbooks, ensuring rapid detection and mitigation of anomalies. • Security Culture & Compliance: Establish security best practices across engineering teams, manage bug bounty programs (e.g., Immunefi), and ensure compliance with relevant industry security standards (e.g., SOC 2). Qualifications & Requirements • Experience: 4+ years of hands-on experience in Information Security, DevSecOps, or Application Security, with at least 2+ years in Web3, DeFi, or high-frequency trading environments. • Technical Expertise: Deep understanding of cloud security (AWS/GCP), container orchestration (Docker/Kubernetes), network security, and CI/CD hardening. • Web3 & DeFi Knowledge: Strong familiarity with EVM/Solana ecosystems, common DeFi attack vectors (reentrancy, oracle manipulation, front-running/MEV, flash loans), and wallet/key infrastructure. • Offensive & Defensive Skills: Proven experience with vulnerability assessments, penetration testing, SIEM tools, and automated security scanning in development pipelines. • Mindset: Paranoid by nature, proactive problem solver, and able to balance uncompromising security with rapid product deployment. Nice-to-Haves • Experience auditing smart contracts or competing in security contests (Code4rena, Sherlock, Cantina). • Familiarity with perpetual futures mechanics, liquidation engines, and orderbook architectures. • Relevant certifications (OSCP, CISSP, AWS Certified Security – Specialty). What We Offer • Competitive base salary + significant token/equity package. • 100% remote work with flexible hours and a globally distributed, high-performing team. • Budget for home office setup, security conferences, and continuous learning. • The opportunity to secure critical infrastructure powering the next wave of decentralized trading.