Security Specialist
The Security Specialist is responsible for designing, implementing, and maintaining security across all products and infrastructure, with a focus on both blockchain/wallet and general application security. This role requires a strategic mindset, strong risk management skills, and the ability to communicate security concepts to both technical and non-technical stakeholders. The ideal candidate is proactive, detail-oriented, and committed to fostering a culture of security throughout the organization.
Responsibilities
- Develop and enforce security policies, standards, and best practices
- Lead security architecture reviews and risk assessments
- Collaborate with engineering, product, and operations teams to ensure secure design and implementation
- Oversee incident response, forensics, and post-incident analysis
- Conduct security awareness training and promote a security-first culture
- Stay current with emerging threats, vulnerabilities, and security technologies
- Ensure compliance with relevant regulations and industry standards
- Coordinate with external auditors, partners, and vendors on security matters
Key Skills
Leadership & Management Skills
Security Leadership
- Ability to lead security initiatives and drive adoption of best practices
- Experience building and scaling security programs
- Skill in prioritizing security risks and allocating resources effectively
- Capacity to inspire a culture of security awareness
Strategic Thinking
- Develop long-term security vision and roadmap
- Balance immediate security needs with future scalability
- Anticipate evolving threat landscapes and adapt strategies accordingly
Project Management
- Manage security projects from conception to completion
- Establish realistic timelines and deliverables
- Coordinate cross-functional teams and external partners
Collaboration & Communication Skills
Cross-functional Collaboration
- Work effectively with engineering, product, and business teams
- Translate security requirements into actionable technical specifications
- Build consensus around security decisions
Communication
- Excellent verbal and written communication skills
- Ability to explain complex security concepts to non-technical audiences
- Create clear security documentation and reports
Stakeholder Management
- Engage with executive leadership and external partners
- Manage expectations and communicate security status and risks
- Build trust and credibility as a security advisor
Problem-Solving & Decision-Making Skills
Analytical Thinking
- Advanced problem-solving and troubleshooting abilities
- Develop innovative solutions to complex security challenges
- Balance theoretical security ideals with practical implementation
Decision Making
- Make sound security decisions under pressure
- Evaluate trade-offs between security, usability, and business needs
- Adapt decisions based on new threats or information
Risk Management
- Identify, assess, and mitigate security risks
- Develop contingency plans for critical systems
- Ensure compliance with legal and regulatory requirements
Other Skills: Personal Attributes
Continuous Learning
- Commitment to staying current with security trends and best practices
- Enthusiasm for exploring new tools and techniques
- Active participation in security communities and forums
Adaptability
- Thrive in a fast-paced, evolving environment
- Flexibility in adjusting to changing requirements and priorities
- Resilience in the face of security incidents and challenges
Integrity & Discretion
- Maintain confidentiality and handle sensitive information responsibly
- Uphold the highest ethical standards in all security practices
Qualifications and Experience
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
- Relevant security certifications (CISSP, CISM, CEH, OSCP, etc.)
- 5+ years of experience in security engineering or related roles
- Demonstrated experience with both blockchain and traditional application/infrastructure security
- Experience leading security initiatives and incident response
- Deep understanding of security frameworks, standards, and regulations (NIST, ISO 27001, GDPR, etc.)
- Awareness of current threat landscape and security technologies
- Familiarity with blockchain security and smart contract vulnerabilities