Security Architect

Zero Hash; New York (NY); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Healthcare Insurance

Vision & Dental Insurance (U.S. only)

Equity

Maternity & Paternity leave

WeWork All Access

WFH Yearly Stipend

L&D Yearly Stipend

Job summary

zerohash is seeking a Security Architect to ensure enterprise architecture meets security requirements for blockchain and non-blockchain systems. You will guide security strategy, architect security controls, and collaborate with product, engineering, and security teams.

You will lead risk assessments, implement threat models, and drive defense-in-depth across cloud environments. Strong AWS experience and blockchain security expertise are essential.

Qualifications

• Minimum 10+ years designing and implementing security infrastructure services in AWS and related security solutions (IAM, EDR, PAM, etc).
• Minimum 5+ years of blockchain security experience.
• Experience in AppSec including SAST, DAST, vulnerability management and pen testing.
• Deep understanding of security operations standards and architectures.
• Proven ability to lead cross-functional security projects and multi‑team coordination.
• Strong written and verbal communication, with ability to present to technical and non-technical audiences.
• Hands-on with AWS services and security tooling; experience with key cloud security controls.
• Familiarity with security concerns around language models, autonomous agents, and AI-augmented systems.
• Proven ability to design and secure cloud-based systems and governance models.
• CISSP, OSCP, GIAC, or AWS Certified Security Specialty is a plus.

Responsibilities

• Implement the security strategy defined by the CISO and influence security maturity across tech teams.
• Review supplier and partner security profiles and enforce compliance.
• Architect, design, and implement security solutions for zerohash’s cloud and product systems.
• Develop and maintain standards for security operations, threat detection, and incident response.
• Conduct regular system tests and continuous monitoring of network security; manage DR procedures.
• Lead security reviews across infrastructure, products, and services; drive SDLC security integration.
• Test web3 and web2 applications for vulnerabilities and manage remediation.
• Provide security training and secure coding guidance to engineering teams.
• Stay current on blockchain security trends and industry standards; advise stakeholders.

Skills

AWS security

Blockchain security

AppSec

Identity management

Threat modeling

Security architecture

Vulnerability testing

Security governance

Cross-functional leadership

Team leadership

Education

Bachelor's degree

Tools

AWS CloudTrail

AWS CloudWatch

AWS SecurityHub

AWS GuardDuty

AWS Inspector

AWS Shield

AWS WAF

Secrets Manager

AWS Lambda

EKS / Kubernetes

Job description

About the Job

Reporting to the CISO, the Security Architect will ensure that stakeholder security requirements necessary to protect the organization’s mission and business processes are adequately addressed in all aspects of enterprise architecture — including reference models, segment and solution architectures, and the resulting systems supporting those missions and business processes. This role carries responsibility for both blockchain and non-blockchain security, and should have experience with both. This position has high visibility and direct responsibility for the effective and efficient architecture of the Security Systems in addition to company and product systems. The role also drives process refinement and implementation, cross-team/discipline collaboration, and maintenance of internal and external stakeholder relationships.

Responsibilities

As part of our team, your core responsibilities will be:

• Implement strategy defined by the CISO, with some input on the same
• Have agency to visit, introspect and influence technology functions to champion maturity of security-critical processes
• Review supplier and partner security profiles and submissions
• Manage existing relationships and tooling to ensure licenses and entitlements are fully utilized
• Map security initiatives and benchmarks to established risk and maturity models
• Do what’s right, so that current and future compliance initiatives come naturally
• Have a finger on the pulse of the industry, proactively maintain knowledge of emerging tactics, tools, and solutions, and advise zerohash stakeholders as appropriate
• Engage with community and sector-specific organisations and working groups
• Champion defence in depth, layering protective controls and segmenting systems as appropriate
• Architect, design, and implement security solutions, tools, and services to protect zerohash’s cloud network environment in collaboration with zerohash engineering teams
• Develop and maintain requirements and standards for capabilities that support security operations, threat detection, intelligence, and incident response functions
• Conduct regular system tests and ensure continuous monitoring of network security
• Establish disaster recovery procedures and conduct breach of security drills
• Promptly respond to all security incidents and provide thorough post-event analyses
• Work with product management and software engineering teams during all phases of the SDLC to ensure that applications are designed and implemented securely
• Leverage threat models to define requirements and identify gaps to address threats
• Perform security reviews of infrastructure, products, and services
• Test web3 and web2 applications and underlying systems for vulnerabilities using both tools and manual techniques; manage the remediation of findings through resolution
• Help develop secure coding standards and training materials based on findings seen in the zerohash environment, to empower engineers to write more secure code
• Research vulnerabilities specific to blockchain technologies and incorporate this knowledge into zerohash’s security practices
• Provide technical expertise on trends and emerging standards in the cloud security and blockchain landscape
• Work closely with team members to enhance, implement, and configure scalable security technologies, and improve detection and response capabilities
• Implement, review, and maintain strong access controls and identity roles within the cloud infrastructure
• Support tooling evaluations and rollouts across the Security program (e.g., SIEM platform evaluation) in partnership with the broader Security team
• Support our CISO and Security team on additional security projects, as needed

Requirements

Baseline skills/experiences/attributes:

• Minimum 10+ years of experience designing and implementing security infrastructure services in AWS, and other security solutions including IAM, EDR, MDM, SIEM, KMS, and PAM
• Minimum 5+ years of experience in blockchain security
• Experience in AppSec including SAST, DAST, open vulnerability management, and pen testing
• Thorough understanding of industry and corporate technology standards for security operations
• Experience developing cybersecurity and IT architectures
• Demonstrated ability to take ownership and work with cross-functional teams to manage multiple projects simultaneously under pressure
• Advanced analytical and problem-solving skills
• Consistently demonstrates clear and concise written and oral communication, as well as strong presentation skills to both technical and non-technical audiences
• Deep experience with identity management solutions, trends, and practice
• Hands-on experience working with AWS services and tools such as CloudTrail, CloudWatch, SecurityHub, GuardDuty, Inspector, Shield, WAF, Secrets Manager, and Lambda
• Strong understanding of secrets management and confidential computing
• Familiar with serverless compute such as AWS Lambda and container implementations with EKS, Kubernetes, etc.
• Experience leading design and security reviews of cloud-based systems
• Familiarity with security concerns around language models, autonomous agents, machine learning, and agentic/AI-augmented systems
• Ability to work closely with software, SRE, and cloud engineers
• Software development experience is a plus
• CISSP, OSCP, GIAC, and/or AWS Certified Security Specialty a plus

Benefits

• Healthcare Insurance: zerohash covers roughly 100% of employee premiums as well as a portion of spouse/children (U.S. only)
• Vision & Dental Insurance (U.S. only)
• Chance to earn equity
• Maternity & Paternity leave (after 6 months)
• WeWork All Access Membership
• WFH Yearly Stipend
• L&D Yearly Stipend (after 6 months)

About zerohash

zerohash is the leading crypto and stablecoin infrastructure platform and the operating system for digital money, powering the next generation of financial services. Founded in 2017, zerohash enables banks, brokerages, fintechs, and payment companies to offer crypto trading, stablecoin payments, and tokenized assets without having to build or manage complex blockchain infrastructure on their own.
The zerohash platform supports three core pillars: Trade, Transact, and Tokenize. Through a single integration, customers can launch regulated crypto buy, sell, and custody services; enable 24/7 stablecoin-based funding, payouts, and settlement; and issue and manage tokenized assets with built-in compliance, risk controls, and reporting. By abstracting away technical, regulatory, and operational complexity, zerohash allows partners to treat digital assets as just another financial primitive: fast, programmable, and global.
zerohash is trusted by some of the world’s most recognized financial and consumer brands, including Interactive Brokers, Morgan Stanley, Stripe, Franklin Templeton, BlackRock, DraftKings, Gusto, Worldpay, Kalshi, One Pay, among others. Today, zero infrastructure supports millions of end users across brokerage, wealth, payments, and marketplace platforms globally.
The company is deeply regulated and compliance-first, operating across the U.S. and internationally with licenses and approvals that allow partners to enter crypto and stablecoins with confidence. zerohash has become a trusted partner for enterprises seeking to modernize financial products while meeting the highest standards for security, risk management, and regulatory oversight.
To date, zerohash has raised over $280 million in funding from a mix of leading venture firms and strategic investors, including Morgan Stanley, Interactive Brokers, SoFi, Point72 Ventures, Bain Capital Crypto, Lightspeed Venture Partners, and more.
zerohash has been featured in top-tier media outlets such as Bloomberg, CNBC, The Wall Street Journal, Financial Times, Reuters, Forbes, and CoinDesk, and its leadership team regularly contributes to global conversations on the future of payments, investing, and financial infrastructure.
At zerohash, we're building the infrastructure that makes digital money work securely, compliantly, and at global scale.

The zerohash Culture

• Independence/Ownership - An ability to work autonomously. Join zerohash, pitch ideas, and shape the work you do.
• Passion - We are innovating quickly and challenging the status quo. We want you to think big, be creative and make a difference every day.
• Collaborative - A good attitude and respect for others. We’re teammates, not co-workers. Everything we do is a shared success and equally a shared failure - we talk in terms of “we” not “me”.
• Initiative - An ability and passion for learning and asking questions. We will champion you, challenge you and push you to achieve your best - and we expect you to do the same.
• Empathy - An ability to listen, respect, and understand your co-workers, customers, and everyone you interact with no matter how different they are to you.
• Adaptability - An ability to respond quickly. We are in a fast-paced industry and so we expect you to be creative when solving a new problem and comfortable under pressure.
• Transparency - We believe that transparency is critical to empowering everyone to make the best decisions, both the company to its people and vice versa.
• Integrity - Integrity creates trust. As both an organization collectively and as individuals, it is our most valuable asset.

Follow us

Twitter

LinkedIn

Youtube

For candidates based in Colorado, please contact colorado-wages @zerohash.com to request compensation and benefits information regarding a particular role(s). Please include with your email the city you reside (or intend to reside in Colorado) and the title/link to the roles you're interested in.