Security Director
Posted 7hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Director of Security protecting Zcash wallets, protocols, and cryptographic infrastructure at ZODL. Leading incident response, audits, security policy, and proactive vulnerability mitigation across a distributed global team.
Responsibilities:
- Maintain and improve ZODL and Zcash security and resilience standards
- Administer and improve security incident response for software, supply chains, and infrastructure
- Manage responses to vulnerabilities and coordinate with external security researchers and affected projects
- Communicate security flaws and mitigations to Zcash, cryptocurrency, and information-security communities
- Build relationships with projects sharing Zcash technology and improve security disclosure processes
- Manage external security assessment providers, audits, schedules, critiques, and follow-up actions
- Advise staff on securing devices and responding to physical and virtual threats
- Onboard staff to security procedures and administer offboarding to mitigate access misuse
- Direct acquisition and maintenance of security infrastructure, devices, and software
- Budget annual security spending in line with product and company roadmaps
- Document security policies and ensure permissions follow least-privilege principles
- Support secure use of cloud computing solutions
- Ensure compliance with applicable security-related regulatory requirements and data protection law
- Work with Engineering and QA on processes, techniques, and training to prevent bugs
- Oversee proactive mitigations for software, protocol, infrastructure, and supply-chain vulnerabilities
- Collaborate on cryptographic code assurance and limiting leakage of user-activity information
- Prioritize security mitigations and refine processes for handling low-impact issues
- Review and reprioritize the security issue backlog
- Develop and maintain specifications supporting security analysis of the Zcash protocol
- Monitor developments in the wider Zcash community
- Recruit and onboard security-focused talent
- Act as the primary owner of security incident response and an internal adversarial reviewer of Zcash specifications and software
Requirements:
- Commitment to user privacy and the cypherpunk ethos of empowering freedom and autonomy through secure, well-designed cryptography
- Confidence working internationally across different contexts and time zones
- Experience with open-source software development
- Experience overseeing security aspects of implementing protocols to detailed specifications
- Deep knowledge of cryptography highly desirable
- Willingness to learn about cryptographic issues essential
- Management experience and hands-on experience developing secure, reliable code in modern programming languages similar to Rust, Swift, Kotlin, and Go
- Strong communication and collaboration skills
- Ability to work to deadlines and maintain accountability for short- and long-term success
- Excellent leadership skills and ability to build consensus and foster collaboration
- Ability to make crucial, informed decisions under pressure
- Blockchain-related experience strongly favoured
- Experience administering or participating in security response processes desirable
- Experience with cryptography and protocol design desirable
- Experience in security analysis of protocols or algorithms, formal methods, or high-assurance software or hardware development desirable
Benefits:
- Equity
- Flexible, remote-first work culture from anywhere in the world
- Semi-annual company-wide off-site meetups across the globe
- Full benefits (medical, vision, and dental) with 100% of premiums paid by ZODL for full-time employees based in the U.S.
- Annual employer HSA contributions for full-time employees based in the U.S.
- 401(k) plan with employer contribution for full-time employees based in the U.S.
- Paid Time Off and Vacation policy for full-time employees based in the U.S.


















