Product Security Manager

MoonPay is a regulated financial infrastructure company moving value across crypto, stablecoins, and tokenized assets. With over 30 million customers and 500+ ecosystem partners, the company operates licensed platforms across the U.S., UK, EU, Canada, and Australia. Built for speed and outcomes, MoonPay maintains a high-accountability culture where AI is embedded into every function and teams solve hard problems with real ownership.

The Technology & Security Services team is hiring a Product Security Manager to lead the infrastructure protecting MoonPay's core platform. You'll oversee two technical teams—Application Security and Vulnerability Management & Automation—while setting the strategic direction for product security across the entire organization.

What you'll do

• Manage and develop the Application Security and Vulnerability Management & Automation teams, overseeing daily operations, career growth, and technical execution
• Build the product security roadmap with emphasis on scalable automation, proactive defense, and security-first product development
• Own the full vulnerability lifecycle from discovery through triage and remediation across the platform ecosystem
• Integrate security tooling like SAST, DAST, and SCA into CI/CD pipelines; lead threat modeling and penetration testing for new features
• Partner with Engineering, Product, and business leaders to embed security into design, manage security debt, and guide acquisitions on security requirements
• Respond to and investigate high-priority security incidents while improving incident response processes and team escalation structures
• Drive organizational compliance and certifications including SOC2, PCI, CIS TOP 18, and ISO 27001

What you'll bring

• Proven experience managing technical security teams in fast-paced, cloud-native, high-growth environments
• Strong technical foundation in application security, penetration testing, and software engineering practices
• Comfort operating in ambiguity while maintaining execution velocity and resolving evolving security challenges
• Conviction that manual security processes are bugs; experience building or deploying automated scanning and reporting systems
• Strategic mindset balancing immediate tactical security needs with long-term organizational goals
• Curiosity or hands-on experience with blockchain, smart contract security, and Web3-specific threat landscapes

You'll work with modern cloud infrastructure built for scale, advanced CI/CD environments requiring security at every stage, custom and industry-standard vulnerability management tools, and emerging AI security challenges around LLM protection and responsible AI compliance.

What We Offer

• Remote position based in Canada
• Full-time employment with a company recognized by Forbes as America's Best Startup Employers 2026 and ranked 2nd in Crypto Services on Fortune's inaugural Crypto 100
• Culture emphasizing outcomes over process, impact over titles, and collaborative problem-solving with high-performing teams