Director of Security

You will lead security incident response and manage timely, thorough responses to vulnerabilities across software, supply chains, and infrastructure. You will improve security processes, coordinate external assessments and disclosure relationships, maintain security policies and access controls, manage security infrastructure and budgets, support staff security, and prioritize mitigations with Engineering and Research.

Responsibilities

• Maintain and improve security and resilience standards for protocols and software
• Administer and improve the security incident response process
• Manage responses to security vulnerabilities in software, supply chains, and infrastructure
• Communicate security flaws and mitigations to relevant communities
• Build relationships with projects sharing Zcash technology
• Manage relationships with external security assessment providers
• Support staff in securing devices and responding to physical and virtual threats
• Onboard and offboard staff securely
• Direct the maintenance and acquisition of security infrastructure, devices, and software
• Manage the annual security budget
• Maintain security policies, permissions, and least-privilege procedures
• Support the secure use of cloud computing solutions
• Ensure compliance with security-related regulatory requirements
• Develop proactive mitigations for software, protocol, infrastructure, and supply-chain vulnerabilities
• Review and prioritize security issues
• Develop and maintain specifications supporting security analysis of the Zcash protocol
• Recruit and onboard security-focused talent

Requirements

• Experience with open-source software development and security aspects of implementing protocols to detailed specifications
• Willingness to learn about cryptographic issues
• Hands-on experience developing secure and reliable code in modern languages similar to Rust, Swift, Kotlin, and Go
• Strong communication and collaboration skills
• Ability to work internationally across different contexts and time zones
• Ability to work to deadlines and maintain accountability
• Excellent leadership and consensus-building skills
• Ability to make informed decisions under pressure

Benefits

• Flexible remote-first work culture
• Semi-annual company-wide off-site meetups
• Medical, vision, and dental coverage with 100% of premiums paid for eligible U.S. full-time employees
• Annual employer HSA contributions for eligible U.S. full-time employees
• 401(k) plan with employer contribution for eligible U.S. full-time employees
• Paid time off and vacation policy