Security Manager

Job Description:

• Own the security strategy and roadmap across Decentralized Masters, Legacy, Inflection Club, and future brands
• Report on security posture and risk to leadership every month
• Own incident response end to end and lead the room during live incidents
• Keep runbooks current, run tabletop exercises, and write actionable postmortems
• Manage and develop the Security Engineer, and build the security team as the company scales
• Write and enforce security policies covering access control, acceptable use, data handling, vendor review, and incident response
• Prepare the company for audits such as SOC 2, working with Legal & Compliance
• Own email security, staff training, and phishing simulations
• Run brand protection by finding and taking down fake domains and social-media accounts impersonating company brands
• Set security standards for customer accounts, including login protection and account-takeover defense
• Work with engineering teams to implement customer-facing platform security
• Set rules for AI agents and automations handling credentials, data, and tool permissions
• Review high-risk AI agents and automations before launch
• Own the security stack and vendors, including SIEM, endpoint protection, email security, identity management, and device management
• Set device and access standards for IT operations
• Provide scam-awareness content to members in collaboration with Community, Support, and Marketing
• Protect the company, platforms, and brands; educate members about scams affecting personal wallets and external accounts
• Report to the Head of Technology and brief the leadership team directly monthly
• Present a 90-day security plan to the Head of Technology as a finalist

Requirements:

• 5+ years in security, including at least 2 years leading a security function or serving as senior security personnel at a company of 100+ people
• Has led live-incident response, not just tabletop exercises
• Has built or rebuilt a security program from an early stage: policy, tooling, training, and incident response
• Experience in crypto, fintech, or another high-fraud industry
• Deep, current knowledge of phishing, social engineering, and impersonation attacks and how to defend against them
• Hands-on experience with SIEM, endpoint protection, email security, and identity and device management platforms
• Can write scripts and automation rather than relying only on vendor UIs
• Writes clear security policy and gets people to follow it
• Briefs executives in plain language and trains non-technical staff
• Comfortable leading in a fully remote team spread across many time zones
• Nice to have: Has prepared a company for SOC 2 or ISO 27001
• Nice to have: Has run a brand protection or takedown program
• Nice to have: Experience securing or evaluating AI agents and LLM-based tools
• Nice to have: Experience with customer-facing security features such as account-takeover defense
• Nice to have: Certifications such as CISSP, CISM, GCIH, OSTH, or OSCP

Benefits:

• Competitive compensation package
• Independent Contractor opportunity
• Fully remote, globally distributed team
• Team offsites
• Collaborative, forward-thinking culture that values innovation and results