Head of Security

• Define and lead the technical security architecture strategy for the company’s exchange platform, cloud infrastructure, and production systems.
  
• Design and deploy Zero Trust security models across both internal and production environments.
  
• Establish security standards for cloud-native infrastructure and Kubernetes-based environments.
  
• Lead the implementation of identity-focused security controls, including MFA/2FA, RBAC, PAM, workload identity, and device trust models.
  
• Develop and enforce security hardening standards for servers, endpoints, containers, APIs, and production workloads.
  

• Secure cloud-native infrastructure and Kubernetes environments through runtime protection, network segmentation, policy enforcement, and workload isolation.
  
• Implement and optimize CSPM, CWPP, EDR/XDR, SIEM, NGFW, and cloud security monitoring solutions.
  
• Develop scalable threat detection and response capabilities for cloud infrastructure and production systems.
  
• Oversee infrastructure vulnerability remediation and patch management governance across production environments.
  

• Design and implement security measures for hot wallets, cold wallets, custody systems, MPC infrastructure, and key management platforms.
  
• Work closely with blockchain and backend engineering teams to secure exchange APIs, wallet services, transaction systems, and blockchain integrations.
  
• Establish monitoring and anomaly detection capabilities to identify suspicious wallet activities, unauthorized transactions, and account takeover attempts.
  
• Strengthen protection against cryptocurrency-specific threats, including API abuse, credential stuffing, wallet compromise, and insider threats.
  
• Establish operational security standards for executives and key personnel, including safeguards for employees with privileged access to wallet and key management systems against targeted physical attacks and coercion-based threats.
  

• Establish and implement secure SDLC and DevSecOps practices across engineering teams.
  
• Integrate SAST, DAST, SCA, secrets scanning, container scanning, and Infrastructure as Code (IaC) scanning into CI/CD pipelines.
  
• Lead application threat modeling, secure architecture reviews, and security design assessments.
  
• Implement software supply chain security measures in accordance with modern software integrity standards.
  
• Coordinate penetration testing activities and collaborate with product and engineering teams to address identified vulnerabilities.
  

• Develop and operate technical security monitoring and threat detection capabilities aligned with MITRE ATT&CK methodologies.
  
• Lead technical incident response activities, including incident triage, containment, root cause analysis, and remediation coordination.
  
• Perform threat hunting, forensic investigations, malware analysis, and purple-team exercises.
  
• Participate in cryptocurrency industry threat intelligence-sharing communities and ISACs, and integrate shared indicators of compromise into the company's detection and monitoring systems.
  
• Develop operational runbooks, incident response playbooks, and security automation workflows for production security operations.
  
• Collaborate with Risk Management and Information Security teams in handling major incidents and conducting post-incident reviews.
  

• Work closely with Risk Management, Compliance, and Information Security teams to support audit readiness and the implementation of security controls.
  
• Ensure accurate and timely incident reporting to Vietnamese regulatory authorities, including the State Bank of Vietnam, Ministry of Public Security/A05, and VNCERT/CC, in coordination with Legal, Compliance, and Risk Management teams, in accordance with Decree 331/2026/ND-CP on Level 4 security requirements and Decree 356/2025/ND-CP on personal data protection.
  
• Provide technical security guidance to Engineering, DevOps, Infrastructure, and Product teams.
  
• Support security assessments of third-party systems, infrastructure vendors, and technology integrations.
  
• Promote security awareness and foster a secure engineering culture across technical teams.
  
• Establish and oversee vulnerability disclosure, bug bounty, and white-hat engagement policies, including procedures for handling funds recovered during an exploit and coordinating with external security researchers.
  

Requirements

• Bachelor’s degree in Computer Science, Information Security, Computer Engineering, or a related field.
  
• At least 8 years of experience in cybersecurity or security engineering, including 3–5 years in leadership or management positions.
  
• Strong hands-on expertise in cloud security, Kubernetes security, infrastructure hardening, and modern security operations.
  
• Proven experience in securing large-scale cloud-native production environments and internet-facing platforms.
  
• In-depth understanding of DevSecOps, application security, CI/CD security, and software supply chain security.
  
• Strong technical knowledge of digital asset exchange security, wallet infrastructure, cryptographic key management, and blockchain-related security threats.
  
• Experience working with SIEM, EDR/XDR, CSPM, CWPP, IAM/PAM, and security observability platforms.
  
• Practical experience in incident response, threat hunting, vulnerability management, penetration testing, and security automation.
  
• Familiarity with modern cyberattack techniques targeting cryptocurrency exchanges and financial platforms.
  
• Strong communication and stakeholder management skills, with the ability to collaborate effectively across engineering and governance teams.
  

• Working knowledge of Vietnamese cybersecurity and data protection regulatory reporting requirements, including the Law on Cybersecurity and Decree 13/2023/ND-CP, along with experience engaging with authorities such as the State Bank of Vietnam, Ministry of Public Security, and VNCERT/CC.
  
• Experience working in cryptocurrency exchanges, fintech companies, payment platforms, or large-scale internet services.
  
• Familiarity with MPC, HSM, blockchain infrastructure, wallet custody systems, and Web3 security models.
  
• Practical experience coordinating security incidents with external stakeholders in the cryptocurrency ecosystem, including other exchanges, custodians, blockchain foundations, and blockchain analytics providers.
  
• Experience establishing or expanding SOC, DevSecOps, or Security Engineering teams.
  
• Professional security certifications such as CISSP, CCSP, OSCP, GIAC, Certified Kubernetes Security Specialist (CKS), or cloud security certifications are preferred.
  
• Familiarity with cryptocurrency-specific security frameworks and industry initiatives, including Whitehat Safe Harbor and cryptocurrency ISAC threat intelligence-sharing practices.