{"id":3111140,"url":"https://alion.io/job/hashgraph-head-of-security","title":"Head of Security","company":{"id":44147,"name":"Hashgraph","domain":"hashgraph.com","url":"https://alion.io/company/hashgraph","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":177000,"max_usd":319000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":727},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Hedera","optional":false},{"name":"Red Teaming","optional":false},{"name":"Smart Contracts","optional":false},{"name":"DeFi","optional":true}],"status":"live","first_seen_at":"2026-10-22T17:29:30Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-27T08:49:57Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About Hashgraph:\nHashgraph is a fast-growing software company committed to supporting, developing and servicing Hedera, an open source, proof-of-stake platform. Hedera is EVM-compatible and has been specifically built to meet the needs of enterprise and web3 applications, which require speed, security, stability and sustainability. Hedera’s public network is governed by industry-leading organizations, spanning 11 sectors and 14 regions who oversee the development and direction of the decentralized platform.\nWhy this role exists:\n We are hiring a Head of Security to help advance our mission by building the security function for a digital asset trading platform that operates as its own business unit, alongside an established security organization that provides shared services and standards. The work includes setting up the governance that regulators and institutional partners will trust.\nThis role exists to ensure that user funds and platform infrastructure are protected, and that the governance around them earns the trust of regulators and institutional partners.\nIn this role, you will:\nSet the security strategy and own the policy framework and risk management program for the business unit, with right-sized governance around them, including escalation paths, risk registers, risk acceptance and exception processes, and a metrics-driven reporting cadence for executives and external stakeholders. You will be the accountable owner for the business unit’s security posture.\n\nDecide which certifications, attestations, and regulatory frameworks the business needs, then carry the chosen ones through to completion. You will also align the program with regulatory requirements in the jurisdictions the business operates in, manage third-party and vendor risk, and serve as the primary security contact for regulators, auditors, institutional partners, and banking counterparties.\n\nCustody, wallet infrastructure, key management, and hot, warm, and cold wallet operations fall under your oversight.\n\nGovern smart contract security through audit requirements, bug bounty programs, and secure release gates. You will make sure the architecture behind trading, matching, settlement, and withdrawal flows is secure, and drive secure SDLC, vulnerability management, and application security practices.\n\nOwn security monitoring and incident response, including crisis playbooks for exploits, key compromise, and market-impacting events. You will run tabletop exercises, red team engagements, and penetration testing, coordinate with legal, compliance, communications, and executive leadership when an incident requires regulatory notification or public disclosure, and oversee business continuity and disaster recovery planning as it relates to security.\n\nLead a small security function that combines direct execution with tooling, partners, and shared services, and manage the security budget, tooling strategy, and vendor relationships. You will partner with engineering, product, legal, and finance to embed security into how the company builds and operates, and define how the function should grow, hiring selectively as the business scales.\n\nWhat success looks like in 6-12 months:\nA right-sized governance framework is operating, with a risk register, an exception process, defined ownership, metrics reported to the business unit’s leadership, and clear escalation.\n\nThe certifications, attestations, and regulatory frameworks the business needs have been determined, and the path to them has been delivered with clean outcomes.\n\nIncident playbooks for key compromise, exploits, and market-impacting events are written, and the team has worked through at least one tabletop exercise.\n\nA staffing plan for the function is in place, setting out what to hire and what to draw from shared services, sequenced to risk and business growth.\n\nWhat you bring:\nCore capabilities:\nJudgment to decide which frameworks and certifications are warranted for a given stage and market.\n\nPractical judgment about what a lean function should build itself and what it should draw from shared services, tooling, and partners.\n\nTechnical judgment balanced with program-level governance, in a senior, hands-on role with direct visibility to executive leadership.\n\nComfort working in a lean team and a matrixed environment.\n\nThe ability to communicate clearly with engineers, executives, regulators, and auditors.\n\nFunctional expertise:\n10+ years in information security, including 5+ years in senior security leadership.\n\nDirect security leadership experience at a centralized exchange (CEX), decentralized exchange (DEX), or comparable digital asset trading or custody platform, including leading incident response through a material security event.\n\nA track record designing and running security governance programs covering policy, risk, audit, and executive reporting, and building or operating compliance and assurance programs.\n\nStrong understanding of crypto-native threats, including private key compromise, smart contract exploits, oracle and bridge attacks, front-end and supply chain compromise, insider risk, and social engineering.\n\nWorking knowledge of key management and custody models (HSM, MPC, multisig) and blockchain protocol fundamentals.\n\nPreferred skills and experience:\nRegulatory engagement across multiple jurisdictions (US, EU, UAE, APAC).\n\nBackground in smart contract security, DeFi protocol risk, or on-chain monitoring and forensics.\n\nExperience standing up a security function inside a newer or fast-scaling business unit.\n\nFamiliarity with DevSecOps and application security posture management.\n\nRelevant certifications such as CISSP, CISM, CISA, or CCSP.\n\nContributions to industry standards bodies, ISACs, or open security communities.","description_format":"text","description_chars":5763,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Smart Contracts & Security","Cryptocurrencies","Blockchain Infrastructure"],"lifecycle":[{"event":"open","at":"2026-10-22T20:43:25Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":36,"reasons":["conf:1","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/hashgraph-head-of-security","json_url":"https://alion.io/job/hashgraph-head-of-security.json","meta":{"generated_at":"2026-10-27T10:49:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12642,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":44147},"rest":"https://alion.io/mcp/rest/get_company?id=44147"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhashgraph-head-of-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhashgraph-head-of-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhashgraph-head-of-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hashgraph-head-of-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhashgraph-head-of-security"}]}