Security Specialist

The Security Specialist is responsible for designing, implementing, and maintaining security across all products and infrastructure, with a focus on both blockchain/wallet and general application security. This role requires a strategic mindset, strong risk management skills, and the ability to communicate security concepts to both technical and non-technical stakeholders. The ideal candidate is proactive, detail-oriented, and committed to fostering a culture of security throughout the organization.

Responsibilities

• Develop and enforce security policies, standards, and best practices
• Lead security architecture reviews and risk assessments
• Collaborate with engineering, product, and operations teams to ensure secure design and implementation
• Oversee incident response, forensics, and post-incident analysis
• Conduct security awareness training and promote a security-first culture
• Stay current with emerging threats, vulnerabilities, and security technologies
• Ensure compliance with relevant regulations and industry standards
• Coordinate with external auditors, partners, and vendors on security matters

Key Skills

Leadership & Management Skills

Security Leadership

• Ability to lead security initiatives and drive adoption of best practices
• Experience building and scaling security programs
• Skill in prioritizing security risks and allocating resources effectively
• Capacity to inspire a culture of security awareness

Strategic Thinking

• Develop long-term security vision and roadmap
• Balance immediate security needs with future scalability
• Anticipate evolving threat landscapes and adapt strategies accordingly

Project Management

• Manage security projects from conception to completion
• Establish realistic timelines and deliverables
• Coordinate cross-functional teams and external partners

Collaboration & Communication Skills

Cross-functional Collaboration

• Work effectively with engineering, product, and business teams
• Translate security requirements into actionable technical specifications
• Build consensus around security decisions

Communication

• Excellent verbal and written communication skills
• Ability to explain complex security concepts to non-technical audiences
• Create clear security documentation and reports

Stakeholder Management

• Engage with executive leadership and external partners
• Manage expectations and communicate security status and risks
• Build trust and credibility as a security advisor

Problem-Solving & Decision-Making Skills

Analytical Thinking

• Advanced problem-solving and troubleshooting abilities
• Develop innovative solutions to complex security challenges
• Balance theoretical security ideals with practical implementation

Decision Making

• Make sound security decisions under pressure
• Evaluate trade-offs between security, usability, and business needs
• Adapt decisions based on new threats or information

Risk Management

• Identify, assess, and mitigate security risks
• Develop contingency plans for critical systems
• Ensure compliance with legal and regulatory requirements

Other Skills: Personal Attributes

Continuous Learning

• Commitment to staying current with security trends and best practices
• Enthusiasm for exploring new tools and techniques
• Active participation in security communities and forums

Adaptability

• Thrive in a fast-paced, evolving environment
• Flexibility in adjusting to changing requirements and priorities
• Resilience in the face of security incidents and challenges

Integrity & Discretion

• Maintain confidentiality and handle sensitive information responsibly
• Uphold the highest ethical standards in all security practices

Qualifications and Experience

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
• Relevant security certifications (CISSP, CISM, CEH, OSCP, etc.)
• 5+ years of experience in security engineering or related roles
• Demonstrated experience with both blockchain and traditional application/infrastructure security
• Experience leading security initiatives and incident response
• Deep understanding of security frameworks, standards, and regulations (NIST, ISO 27001, GDPR, etc.)
• Awareness of current threat landscape and security technologies
• Familiarity with blockchain security and smart contract vulnerabilities