Security Director

This is a fully remote position, open to applicants in United States, +5 more states.

📋 Description

• Uphold and enhance the security and resilience standards for ZODL and Zcash.

• Manage and improve the security incident response for software, supply chains, and infrastructure.

• Oversee responses to vulnerabilities and collaborate with external security researchers and affected projects.

• Convey security vulnerabilities and mitigations to the Zcash, cryptocurrency, and information-security communities.

• Foster relationships with projects utilizing Zcash technology and enhance security disclosure protocols.

• Coordinate with external security assessment providers, audit schedules, critiques, and follow-up actions.

• Provide guidance to staff on securing devices and addressing both physical and virtual threats.

• Facilitate staff onboarding to security protocols and manage offboarding to prevent access misuse.

• Lead the acquisition and upkeep of security infrastructure, devices, and software.

• Allocate annual security budget in alignment with product and company roadmaps.

• Document security policies and ensure adherence to least-privilege principles for permissions.

• Promote secure utilization of cloud computing solutions.

• Ensure compliance with relevant security regulations and data protection laws.

• Collaborate with Engineering and QA on processes, techniques, and training to minimize bugs.

• Supervise proactive measures against software, protocol, infrastructure, and supply-chain vulnerabilities.

• Work together on cryptographic code assurance and reducing the leakage of user activity information.

• Prioritize security mitigations and refine processes for managing low-impact issues.

• Review and reprioritize the security issue backlog.

• Develop and maintain specifications that support security analysis of the Zcash protocol.

• Keep track of developments in the broader Zcash community.

• Recruit and onboard talent focused on security.

• Serve as the primary owner of security incident response and act as an internal adversarial reviewer of Zcash specifications and software.

⛳️ Requirements

• Strong commitment to user privacy and the cypherpunk ethos that promotes freedom and autonomy through secure, well-designed cryptography.

• Comfortable working internationally across various contexts and time zones.

• Experience in open-source software development.

• Proven experience overseeing security aspects of implementing protocols according to detailed specifications.

• In-depth knowledge of cryptography is highly desirable.

• Eagerness to learn about cryptographic issues is essential.

• Management experience combined with hands-on experience in developing secure, reliable code in modern programming languages such as Rust, Swift, Kotlin, and Go.

• Exceptional communication and collaboration abilities.

• Capability to meet deadlines and maintain accountability for both short- and long-term success.

• Strong leadership qualities, with the ability to build consensus and promote collaboration.

• Ability to make critical, informed decisions under pressure.

• Experience related to blockchain is highly favored.

• Familiarity with administering or participating in security response processes is desirable.

• Knowledge of cryptography and protocol design is advantageous.

• Experience in security analysis of protocols or algorithms, formal methods, or high-assurance software or hardware development is beneficial.

🏝️ Benefits

• Equity.

• Flexible, remote-first work culture allowing you to work from anywhere globally.

• Semi-annual company-wide off-site meetups held around the world.

• Comprehensive benefits package (medical, vision, and dental), with 100% of premiums covered by ZODL for full-time employees located in the U.S.

• Annual employer contributions to HSA for full-time employees based in the U.S.

• 401(k) plan with employer contributions for full-time employees based in the U.S.

• Paid Time Off and vacation policy for full-time employees located in the U.S.