Head of Security

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Develop and take ownership of a risk-focused security strategy for Airtm’s financial platform.

• Assess security investments based on threat levels and business impact, and provide updates to executive leadership and the board.

• Manage detection, response, and recovery processes for security incidents.

• Maintain operational runbooks, lead incident responses and post-incident reviews, and collaborate with forensics, legal, and communications teams.

• Integrate security practices into the Software Development Life Cycle (SDLC) through threat modeling, secure design evaluations, SAST, DAST, dependency scanning, and adherence to secure coding standards.

• Collaborate with the Infrastructure team to enhance security for AWS, Kubernetes, networking, and CI/CD pipelines.

• Oversee Identity and Access Management (IAM), enforce least-privilege access, manage secrets, and ensure security in Terraform and GitOps processes.

• Develop detection and alerting mechanisms across application, infrastructure, and access logs.

• Take responsibility for security pertaining to key management, wallet and custody operations, and blockchain integrations.

• Work with Product and Risk teams on account takeover, abuse prevention, and transaction-level security measures.

• Establish guidelines for AI coding tools, AI agents, and large language model (LLM) pipelines.

• Lead the security compliance program, manage audits, and address customer and partner security inquiries.

• Conduct vendor risk assessments and perform security due diligence.

• Set vulnerability remediation Service Level Agreements (SLAs) and ensure timely remediation across teams.

• Recruit, develop, and lead security engineers while building a network of security champions.

• Engage in and contribute to the security escalation process for production incidents.

⛳️ Requirements

• Minimum of 8 years of experience in information or application security, with at least 3 years in leadership roles overseeing security teams or functions.

• Proven experience leading incident responses for significant, high-stakes incidents, including coordination with external forensics and legal counsel.

• In-depth knowledge of AWS security and Kubernetes security, including IAM, network segmentation, RBAC, secrets management, and container/image security.

• Practical experience with application security in a microservices architecture, including threat modeling, secure code reviews, and managing dependency and supply-chain risks.

• Experience in developing detection and monitoring capabilities, such as SIEM, log analysis, alerting, and tools like Datadog.

• Background in managing or leading compliance programs, such as SOC 2, ISO 27001, or PCI-DSS, including handling audit processes.

• Proficient in reading and reviewing TypeScript/Node.js code and infrastructure-as-code using Terraform.

• Experience in securing CI/CD pipelines and software supply chains.

• Hands-on experience with AI-assisted tools, such as Claude Code, Cursor, or GitHub Copilot, in security contexts.

• A clear understanding of the risks associated with AI-generated code and autonomous systems.

• Excellent communication skills for articulating risks to engineers, executives, regulators, and customers, as well as for crafting policies and operational runbooks.

• Strong judgment under pressure, with the ability to make quick, defensible decisions based on incomplete information.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health insurance packages.

• Flexible working hours and remote work options.

• Opportunities for professional development and continuous learning.