Security Architect - Cloud & Blockchain Defense Leader

zerohash; City of Albany (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Healthcare Insurance

Equity

WFH yearly stipend

Maternity & Paternity leave

Job summary

zerohash is seeking a Security Architect to ensure enterprise security requirements are embedded across reference models, architectures, and systems. You will own security for both blockchain and non-blockchain domains, shaping security strategy, and leading cross-team collaboration with engineering and product management.

The role involves designing, deploying, and maintaining security controls in AWS, conducting threat modeling, risk assessments, and incident response.

Qualifications

• Minimum 10+ years designing and implementing security infrastructure in AWS and related tools.
• Minimum 5+ years in blockchain security.
• Experience with AppSec including SAST, DAST, vulnerability management, and pen testing.

Responsibilities

• Implement security strategy defined by the CISO and drive maturity of critical processes.
• Architect and implement security solutions for zerohash cloud environment.
• Review supplier security profiles and manage tooling licenses.
• Perform security reviews of infrastructure, products, and services.
• Test web3 and web2 applications for vulnerabilities and remediate findings.
• Collaborate with product and engineering during SDLC to ensure secure designs.

Skills

Security architecture

AWS security

Blockchain security

Threat modeling

Identity & access management

Incident response

Cross-team collaboration

Education

Bachelor's degree in Computer Science or related field

CISSP / AWS Certified Security Specialty

Tools

AWS CloudTrail

AWS CloudWatch

AWS Security Hub

AWS GuardDuty

KMS / Secrets Manager

Job description

zerohash is seeking a Security Architect to ensure enterprise security requirements are embedded across reference models, architectures, and systems. You will own security for both blockchain and non-blockchain domains, shaping security strategy, and leading cross-team collaboration with engineering and product management.

The role involves designing, deploying, and maintaining security controls in AWS, conducting threat modeling, risk assessments, and incident response.