Director, Ecosystem Product Security
This strategic and hands-on leadership role will establish security standards, coordinate shared risks and incident response, drive secure development, and oversee product, infrastructure, treasury, and custody-related security for the Stellar Development Foundation.
Responsibilities
- Define and lead security strategy across the Stellar ecosystem and Foundation-owned systems
- Raise the security baseline for wallets, infrastructure providers, custodians, issuers, and validators
- Publish actionable security guidance, reference patterns, and expectations
- Build coordination mechanisms for shared risks, incident response, and ecosystem security improvements
- Own security outcomes for Foundation-developed software, operated infrastructure, and treasury and custody responsibilities
- Partner with Engineering, Finance, Legal, IT, and Corporate Security to implement security controls and practices
- Lead secure development across architecture, threat modeling, vulnerability management, bug bounty programs, and product incident response
- Build and lead a high-performing security team
- Represent the Foundation externally on ecosystem security
Requirements
- 10+ years of security experience, including significant senior leadership experience
- 5+ years leading security programs, teams, or functions
- Experience owning security outcomes for complex, high-consequence production systems
- Deep product and application security experience
- Familiarity with blockchain and decentralized system security
- Ability to assess and prioritize risks involving protocol design, smart contracts, wallets, validators, dependencies, and governance mechanisms
- Experience driving security improvements across multiple teams, organizations, or ecosystem participants
- Experience handling high-severity incidents and disclosure processes
- Experience building, leading, and developing security teams
- Ability to set strategy, translate it into execution, and deliver measurable outcomes
- Experience operating where security failures could cause financial loss, operational disruption, or loss of trust
Benefits
- Health, dental, and vision coverage
- Flexible time off
- 15 company holidays and a company-wide holiday break
- Paid parental leave
- Paid pregnancy disability leave
- Gym reimbursement
- Life and accidental death and dismemberment insurance
- Short-term and long-term disability coverage
- 401K with 4% match
- Health and Dependent Care FSA accounts
- Commuter benefits with employer contribution
- Health Savings Account with employer contribution
- Family building benefits through Kindbody
- Wellbeing benefits through One Medical, Rightway, and Headspace
- Daily lunch and snacks in the office
- Company retreats