Role in brief
Galaxy is seeking a Blockchain Security Lead to oversee security strategies and lead a team of engineers. Ideal candidates will have extensive experience in blockchain security, smart contracts, and team leadership.
About the role
In this role at Galaxy, you will lead a team of blockchain security engineers, defining and evolving the security strategy for on-chain systems. Your responsibilities will include performing threat modeling and architecture reviews, guiding security audits, and ensuring the integration of security into product development.
The company focuses on building secure blockchain systems and protocols in the Web3 space. Success in this position will come from effectively mentoring your team, collaborating with product and engineering teams, and implementing robust security controls that adapt to the evolving landscape of blockchain threats.
Skills that matter here
- blockchain: This role requires deep expertise in blockchain technologies to ensure the security of on-chain systems.
- security: You will define security strategies and oversee the security posture of the organization's protocols.
- smart contracts: Experience in auditing and securing smart contracts is essential for this position.
- Solidity: Proficiency in Solidity is necessary for conducting security reviews of smart contracts.
- Rust: Familiarity with Rust is important for auditing smart contracts on various chains.
- Kubernetes: You will support the secure deployment of cloud-native infrastructure, including Kubernetes.
Who this role suits
- You have a strong background in security software engineering with over 10 years of experience.
- You thrive in leadership roles, having experience mentoring technical teams.
- You are detail-oriented and can balance hands-on execution with strategic oversight.
- You communicate effectively with both technical and non-technical audiences.
From the employer
Responsibilities
- Lead, mentor, and grow a team of blockchain security engineers
- Define and evolve the blockchain security strategy and roadmap
- Serve as a trusted security partner to product, protocol, and infrastructure teams
- Lead threat modeling and architecture reviews for on-chain systems
- Perform and guide security reviews and audits of smart contracts (Solidity, Rust/Solana) and backend services and supporting infrastructure
- Design and implement reusable security controls, patterns, and reference architectures
- Support secure deployment of cloud-native infrastructure (containers, Kubernetes)
- Research emerging blockchain threats, exploits, and mitigations, and translate them into actionable controls
- Embrace and champion the thoughtful adoption of AI to improve team performance and business outcomes
- Leverage AI tools (e.g., generative AI, automation platforms, data copilots) to improve productivity, decision-making, and output quality in your day-to-day work
Requirements
- The Blockchain Security Lead owns the security posture of on-chain systems and protocols across the organization. This role blends strategic leadership with deep hands-on expertise, overseeing a small team of blockchain security engineers while actively contributing to design reviews, threat modeling, and code audits
- You’ll partner closely with on-chain product and engineering teams to embed security into architecture, development, and operations—building scalable, reusable security controls that grow with the business
- Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience)
- 10+ years of security software engineering experience
- 5+ years working with blockchain technologies
- 5+ years working with smart contract security across multiple chains
- Experience leading or mentoring a small, highly technical team
- Published material on vulnerabilities/security bugs within the Web3 community
- Expertise in secure SDLC, threat modeling, and application architecture review
- Multi agent code reviews for vulnerabilities using frontier models
- Secure coding practices and in-depth code review capability
- Strong familiarity with smart contracts (Solidity, Rust), cloud-native environments (Docker, Kubernetes), authentication and authorization, TLS/PKI, and cloud, infrastructure, and network security
- Clear, confident communicator across technical and non-technical audiences
- Comfortable balancing hands-on execution with strategic ownership; detail-oriented, pragmatic, and strong in problem solving under ambiguity
Questions about this role
What is the remote policy?
The position is fully remote.
What level of seniority is this role?
This is a senior-level position.
How do I apply?
Candidates can apply through the company's website.
✓ Apply here in a minute. Your application and answers go straight to the hiring person, so you never land in a spam pile.