{"id":3180710,"url":"https://alion.io/job/airtm-head-of-security","title":"Head of Security","company":{"id":670285,"name":"Airtm","domain":"airtm.com","url":"https://alion.io/company/airtm-2","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":85,"open_postings":4,"ghost_share":0,"stale_share":0.25,"repost_share":0.25,"time_to_fill_p50_days":202,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["AR"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":73000,"max_usd":165000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":4188},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"Copilot","optional":false},{"name":"Cursor","optional":false},{"name":"Datadog","optional":false},{"name":"GitOps","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Node JS","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"JavaScript","optional":true},{"name":"Kyverno","optional":true},{"name":"React.js","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-10-23T19:29:22Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-11-03T00:53:54Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"About us:\nAirtm is a financial-infrastructure company building the future of the online-work economy. We are on a mission to empower the world's growing number of Digital Entrepreneurs in the Global South, giving them the financial freedom to thrive.\nThe problem is clear: in emerging markets, accessing the dollar economy is difficult. Cross-border payments are slow, expensive, and often lose value to inflation. This limits the potential of millions of talented individuals.\nAirtm’s solution is a swift and comprehensive financial platform that facilitates low-value cross-border payments and local cash-outs. As pioneers in stablecoin-payment infrastructure, Airtm has built the most advanced cross-border payment system available on the market.\nAs a company married to the world of online work, Airtm will go beyond payments to build the necessary infrastructure the online-work economy needs to thrive. We are fostering an entirely new economy, giving individuals, communities, and countries the tools to take control of their financial destinies.\nAbout the Role\nWe're looking for a Head of Security to build and lead security at Airtm, reporting to the VP of Engineering. You'll own the security posture of the systems that move people's money across borders, from application code and cloud infrastructure to identity, vendors, and incident response. You'll set the strategy, build the team and the practices around it, and stay hands-on enough to make the hard technical calls yourself.\nOur stack is TypeScript/Node.js microservices on Kubernetes (AWS), with React front ends, organized into autonomous product teams. Security here works as an enabler embedded in how teams ship, not a gate at the end. AI-assisted development is core to how we build, so you'll be expected to use AI tooling fluently for security work, and to define how we adopt AI agents and LLM-powered systems safely.\nKey Responsibilities\nSecurity Strategy & Roadmap: Define and own a risk-based security strategy for a financial platform; prioritize investment by real threat and business impact, and report on posture to executive leadership and the board\n\nIncident Response: Own detection, response, and recovery for security incidents; maintain runbooks, lead incidents and post-incident reviews, coordinate with forensics, legal, and communications, and turn every incident into lasting improvements\n\nApplication Security: Embed security into the SDLCwith threat modeling, secure design reviews, SAST/DAST/dependency scanning, and secure coding standards that engineers actually adopt\n\nCloud & Infrastructure Security: Partner with Infrastructure to harden AWS, Kubernetes, networking, and CI/CD pipelines; own IAMand least-privilege access, secrets management, and security in Terraform and GitOps workflows\n\nDetection & Monitoring: Build the detection and alerting capability that finds malicious activity early, across application, infrastructure, and access logs, and tune it to keep signal high\n\nCrypto & Key Security: Own the security model for key management, wallet and custody operations, and the blockchain integrations our payment rails depend on\n\nFraud & Account Security Collaboration: Work with Product and Risk teams on account takeover, abuse, and transaction-level controls\n\nAI Security: Define guardrails for AI coding tools and for AI agents and LLM pipelines we build or deploy, including agent permissions, prompt injection, data exposure, and tool-access boundaries\n\nCompliance & Assurance: Own our security compliance program (SOC 2 and related frameworks), audits, and customer and partner security questionnaires, aiming to make compliance a byproduct of good engineering rather than a separate burden\n\nVendor & Third-Party Risk: Run vendor risk assessments and security due diligence for partners, investors, and acquirers\n\nVulnerability & Patch Management: Establish clear SLAs by severity and keep remediation moving across teams without becoming a bottleneck\n\nTeam Building & Mentorship: Hire, grow, and lead security engineers; build a security champions network inside product teams; raise the security bar across all of engineering\n\nOn-Call & Escalation: Participate in and help shape the security escalation path for production incidents\n\nRequired Qualifications\n8+ years of experience in information or application security, including 3+ years leading security teams or functions\n\nDemonstrated experience leading incident response for real, high-stakes incidents, including coordination with external forensics and counsel\n\nStrong knowledge of AWS security and Kubernetes security (IAM, network segmentation, RBAC, secrets management, container and image security)\n\nHands-on experience with application security in a microservices environment: threat modeling, secure code review, and dependency and supply-chain risk\n\nExperience building detection and monitoring capabilities (SIEM, log analysis, alerting; Datadog or similar)\n\nExperience owning or leading a compliance program such as SOC 2, ISO 27001, or PCI-DSS, including audit cycles\n\nAbility to read and review TypeScript/Node.js code and infrastructure-as-code (Terraform); you don't need to be a full-time developer, but you need to be credible with engineers\n\nExperience securing CI/CD pipelines and software supply chains\n\nHands-on experience with AI-assisted tools (e.g., Claude Code, Cursor, GitHub Copilot) for security work, and a clear point of view on the risks of AI-generated code and agentic systems\n\nStrong communication skills; able to explain risk to engineers, executives, regulators, and customers, and to write policies and runbooks people follow\n\nSound judgment under pressure; able to make fast, defensible calls with incomplete information\n\nNice to Have\nBackground in fintech, payments, remittance, or crypto environments, especially key management, custody, and blockchain security\n\nExperience with fraud, account takeover, and abuse prevention\n\nExperience securing AI agents and LLM-powered systems in production (prompt injection defenses, tool-permission models, eval and red-teaming approaches)\n\nHands-on offensive security experience (penetration testing, red teaming) or running bug bounty programs\n\nExperience with cloud-native security tooling (CSPM, runtime protection, policy-as-code such as OPA/Kyverno)\n\nFamiliarity with regulatory requirements for money transmission and financial services across multiple jurisdictions\n\nSecurity certifications (CISSP, CISM, OSCP, AWS Security Specialty)\n\nExperience supporting investor, buyer, or enterprise due diligence on security posture\n\nExperience building a security function from a small base in a fast-growing engineering org\n\nWhat We Look For\nBeyond the technical skills, we're looking for a leader who:\nTakes ownership of security outcomes, stays calm and clear in an incident, and communicates early when risk is rising\n\nTreats security as a partnership with engineers, building guardrails and paved roads rather than gates and tickets\n\nHas good judgment about risk, knowing when to stop a release, when a small risk is worth the speed, and how to explain the tradeoff to the business\n\nImproves the team around them, through mentorship, champions, and making secure choices the easy ones\n\nCollaborates across boundaries, working with Product, Infrastructure, Legal, Compliance, and Support as one team\n\nKnows when (and when not) to lean on AI tooling, and brings rigor to how we adopt it safely","description_format":"text","description_chars":7453,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Argentina","iso":"AR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Smart Contracts & Security","Payment Processing & Gateways","Money Transfer & Remittances"],"lifecycle":[{"event":"open","at":"2026-10-23T21:25:02Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":9,"expected_fill_days":202,"reasons":["conf:3","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/airtm-head-of-security","json_url":"https://alion.io/job/airtm-head-of-security.json","meta":{"generated_at":"2026-11-03T02:34:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3373,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":670285},"rest":"https://alion.io/mcp/rest/get_company?id=670285"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fairtm-head-of-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fairtm-head-of-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fairtm-head-of-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/airtm-head-of-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fairtm-head-of-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3180710}},{"tool":"search_jobs","arguments":{"company":"airtm.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3180710},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}