Apply on Employer Site

CoinTracker · 4 months ago

Founding Security Lead

United States

Full-time

Remote

Senior Level

$140K/yr - $175K/yr

CoinTracker is a company that simplifies cryptocurrency portfolio tracking and tax compliance. They are seeking a Founding Security Lead to define and build their security foundation, implement security roadmaps, and embed security practices into their engineering workflows.

BlockchainComplianceCryptocurrencyFinancial ServicesFinTechSoftware

No H1B

Responsibilities

Define and execute the security roadmap

Lead the design and implementation of secure application and cloud practices, including code scanning, vulnerability management, and infrastructure hardening

Define and implement data security and privacy controls, including encryption, secrets management, and regulatory compliance (e.g., SOC 2, GDPR)

Establish monitoring, detection, alerting, and logging capabilities. Define and operationalize incident response playbooks, manage vulnerabilities, and lead postmortems to continuously improve processes

Partner with engineering and product teams to embed security into the development lifecycle (threat modeling, security reviews, automation)

Advocate for security best practices and foster a proactive security mindset across CoinTracker

Qualification

Security roadmap developmentApplication security initiativesVulnerability managementIncident response processesData security controlsCloud security practicesRegulatory complianceSoft skills

Required

Define and implement the security roadmap: Identify short-term wins and establish the long-term foundation to scale CoinTracker's security posture

Embed security into engineering workflows: Lead application security initiatives, including threat modeling, secure code reviews, vulnerability management, and code scanning, and partner with engineering teams to proactively identify and mitigate application risks across our systems and architecture

Build and operationalize security monitoring and response: Establish detection, monitoring, and alerting capabilities, establish ongoing vulnerability management, define and operationalize incident response processes, and lead security postmortems to continuously improve security practices

Define and execute the security roadmap

Lead the design and implementation of secure application and cloud practices, including code scanning, vulnerability management, and infrastructure hardening

Define and implement data security and privacy controls, including encryption, secrets management, and regulatory compliance (e.g., SOC 2, GDPR)

Partner with engineering and product teams to embed security into the development lifecycle (threat modeling, security reviews, automation)

Advocate for security best practices and foster a proactive security mindset across CoinTracker