Security Architect

Zero Hash is a leading infrastructure platform for cryptocurrency and stablecoin services that enables the next generation of financial systems. The company builds technology that bridges traditional finance and digital assets, serving as a critical backbone for emerging financial services in the crypto ecosystem.

As a Security Architect reporting to the Chief Information Security Officer, you will shape the security posture of Zero Hash's entire enterprise. This role bridges blockchain and traditional infrastructure security, requiring you to design and implement protective systems across cloud environments, applications, and organizational processes. You'll have high visibility, direct ownership of security architecture decisions, and responsibility for ensuring that all systems—from product applications to internal infrastructure—meet rigorous security standards.

What you'll do

• Implement and refine security strategy in partnership with the CISO, visiting and auditing technology functions to advance the maturity of security-critical processes

• Design and architect security solutions, tools, and services to protect Zero Hash's cloud network infrastructure in collaboration with engineering teams, including AWS-based implementations with services like CloudTrail, CloudWatch, SecurityHub, GuardDuty, Inspector, Shield, WAF, Secrets Manager, and Lambda

• Review and manage supplier and partner security assessments, maintain vendor relationships, and optimize existing security tooling and licensing

• Map security initiatives against established risk and maturity models; develop and maintain requirements and standards for security operations, threat detection, intelligence, and incident response

• Lead security reviews and threat modeling for infrastructure, products, and services; conduct vulnerability testing on both web3 and web2 applications using automated tools and manual techniques

• Conduct regular system tests, establish continuous monitoring and disaster recovery procedures, and provide rapid incident response and post-incident analysis

• Work with product and engineering teams throughout the software development lifecycle to ensure secure design and implementation; develop secure coding standards and training based on findings

• Stay current on blockchain security research, emerging threats, industry trends, and standards in cloud and blockchain security; engage with industry working groups and community organizations

What you'll bring

• Minimum 10 years designing and implementing security infrastructure in AWS and other enterprise solutions including IAM, EDR, MDM, SIEM, KMS, and PAM

• Minimum 5 years of hands-on blockchain security experience

• Strong AppSec background including SAST, DAST, vulnerability management, and penetration testing

• Deep expertise in identity management solutions, secrets management, and confidential computing

• Hands-on familiarity with serverless compute (AWS Lambda) and container orchestration (EKS, Kubernetes)

• Demonstrated ownership mindset and ability to manage multiple complex projects simultaneously while collaborating across functions under pressure

• Advanced problem-solving skills with clear written and oral communication for both technical and non-technical audiences

• Experience leading design and security reviews of cloud-based systems

• Knowledge of security implications around AI, machine learning, language models, and autonomous agents

Nice to have

• Software development experience

• CISSP, OSCP, GIAC, or AWS Certified Security Specialty certification

• Familiarity with security concerns specific to blockchain technologies

What they offer

• Comprehensive healthcare, vision, and dental insurance with Zero Hash covering approximately 100% of employee premiums plus a portion of family coverage (U.S. only)

• Equity opportunity and maternity/paternity leave after 6 months

• Annual work-from-home stipend and learning and development stipend (after 6 months)

• WeWork All Access Membership