Head of Security

Job not on LinkedIn

🕒 June 24

🌐 France, United States – Remote

infoinfo

⏰ Full Time

🔮 Lead

đŸ‘źâ€â™‚ïž Cybersecurity / Security Engineer

đŸ‘» Ghost score 34%

infoinfo

Cloud

Web3

Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of Morpho

Morpho

51 - 200 employees

Founded 2021

₿ Crypto

🌐 Web 3

💰 $50M Venture Round - Morpho Labs on 2024-07

Crypto ‱ Web 3

Morpho is a decentralized, enterprise-grade on-chain lending infrastructure and protocol that connects borrowers and lenders to access global liquidity and offer yield on crypto assets. It provides APIs, SDKs, embeddable products, vault curation, and tooling for consumer and institutional lending use cases—including crypto-backed loans, flash loans, and customizable lending strategies—while emphasizing open, auditable, and secure Web3 infrastructure.

📋 Description

‱ Define and continuously evolve Morpho's security strategy and roadmap across cloud/infrastructure, application, supply-chain, identity, and operational security ‱ Build and lead the security function, including hiring, growing, and developing the team ‱ Oversee the IT function ‱ Personally execute critical security work, including threat modeling, architecture review, control implementation, and incident command ‱ Establish a coherent security governance framework connecting tooling and controls ‱ Own incident response end to end, including runbooks, incident command, severity and escalation structure, and market communication ‱ Build and run a counterparty security program for curators and partners, including identity verification, screening, operational diligence, and incident-coordination channels ‱ Lead Morpho's certification strategy, including SOC 2 and ISO 27001 ‱ Represent Morpho's security posture to fintechs, financial institutions, ecosystem partners, and executives ‱ Partner with Engineering, Protocol, and Integrations to drive security outcomes ‱ Establish security posture, close high-priority gaps, validate incident response through tabletop exercises, and build the team during the first 90 days

🎯 Requirements

‱ 10+ years in security, several of them building or leading a security function, ideally at a crypto/web3, fintech, or financial-services company where security is core to the business ‱ Strong grasp of the crypto/web3 threat model ‱ Proven experience building and growing a security team from a small base, recruiting across security operations and application/infrastructure security ‱ Deep, hands-on technical expertise across cloud, infrastructure, CI/CD, supply-chain, identity, and application security ‱ Owned incident response end to end, including incident command and external communication ‱ Sharp prioritization and ability to drive outcomes through teams not directly owned ‱ Exceptional, organized, responsive communication credible to executives and external audiences ‱ Humble ‱ Offensive security depth, or experience standing up red/blue capabilities ‱ Familiarity with institutional and regulatory expectations and threat-sharing networks, such as Crypto ISAC and TIBER-style frameworks ‱ Experience taking an organization through SOC 2, ISO 27001, or equivalent certifications

đŸ–ïž Benefits

‱ Fair, top-tier compensation ‱ Real flexibility ‱ Time together in Paris ‱ Great health coverage ‱ Support to keep learning

Apply Now