Ecosystem Product Security Director

TechChain Talent; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Stellar is seeking a Director of Ecosystem & Product Security to orchestrate security strategy across the Stellar ecosystem and own security outcomes for Foundation-developed systems and treasury-related security responsibilities. The role blends strategic leadership with hands-on technical judgment in decentralized systems, product security, and operational risk.

You will define baseline security, publish guidance, and coordinate incident response across wallets, infrastructure providers,

Qualifications

• 10+ years of security experience with significant senior leadership.
• 5+ years leading security programs, teams, or functions with meaningful scope.
• Track record of owning security outcomes for complex, high-consequence systems in production.
• Deep experience in product and application security with hands-on judgment.
• Ability to assess and prioritize risk across protocol design, smart contracts, wallets, validators, dependencies, and governance mechanisms.
• Experience driving security improvements across multiple teams, organizations, or ecosystem participants, including without direct authority.

Responsibilities

• Define and lead the Foundation's security strategy across the Stellar ecosystem and Foundation-owned systems.
• Raise the practical security baseline for key ecosystem participants including wallets, infrastructure providers, custodians, issuers, and validators.
• Publish actionable guidance, reference patterns, and security expectations that drive real adoption across the ecosystem.
• Build coordination mechanisms for shared risks, incident response, and cross-ecosystem security improvement.
• Own security outcomes for Foundation-developed software, Foundation-operated infrastructure, and treasury/custody responsibilities.
• Partner with Engineering, Finance, Legal, IT, and Corporate Security to drive security controls.
• Lead secure development efforts across architecture, threat modeling, vulnerability management, bug bounty programs, and product incident response.
• Build and lead a high-performing security team.

Skills

Security leadership

Product security

Threat modeling

Vulnerability management

Incident response

Cross-team collaboration

Tools

NIST SSDF

OWASP SCSVS

SEAL

Job description

About the job Ecosystem Product Security Director

Stellar is a decentralized, public blockchain that gives developers the tools to create experiences that are more like cash than crypto. The network is faster, cheaper, and far more energy-efficient than most blockchain-based systems.

About the Role

We're hiring a Director, Ecosystem & Product Security to lead security strategy across the Stellar ecosystem and directly own security outcomes for Foundation-developed systems, Foundation-operated infrastructure, and treasury-related security responsibilities. The role is both strategic and hands‑on, requiring deep technical judgment across decentralized systems, product security, and operational risk.

Key Responsibilities

• Define and lead the Foundation's security strategy across the Stellar ecosystem and Foundation-owned systems
• Raise the practical security baseline for key ecosystem participants including wallets, infrastructure providers, custodians, issuers, and validators
• Publish actionable guidance, reference patterns, and security expectations that drive real adoption across the ecosystem
• Build coordination mechanisms for shared risks, incident response, and cross-ecosystem security improvement
• Own security outcomes for Foundation-developed software, Foundation-operated infrastructure, and treasury/custody responsibilities
• Partner with Engineering, Finance, Legal, IT, and Corporate Security to drive security controls
• Lead secure development efforts across architecture, threat modeling, vulnerability management, bug bounty programs, and product incident response
• Build and lead a high-performing security team

Requirements

• 10+ years of experience in security, including significant senior leadership experience
• 5+ years leading security programs, teams, or functions with meaningful scope
• Track record of owning security outcomes for complex, high-consequence systems in production
• Deep experience in product and application security with hands‑on judgment in real‑world environments
• Ability to assess and prioritize risk across protocol design, smart contracts, wallets, validators, dependencies, and governance mechanisms
• Experience driving security improvements across multiple teams, organizations, or ecosystem participants, including without direct authority

Bonus Skills

• Strong familiarity with blockchain and decentralized system security
• Experience operating in environments where security failures could lead to financial loss or loss of trust
• Strong incident judgment, including experience handling high‑severity incidents and disclosure processes
• Experience with secure development frameworks such as NIST SSDF
• Familiarity with Web3 security frameworks such as OWASP SCSVS or SEAL
• Experience in financial infrastructure, payments, custody, or tokenized finance
• Experience in identity, trust, encryption, or internet‑scale systems