Security Jobs in Web3

OpenSea is the first and largest marketplace for non-fungible tokens, or NFTs, which are digital goods endowed with property rights. Applications for NFTs include collectibles, gaming items, domain names, digital art, and many other items backed by a blockchain. NFTs have brand new properties that go beyond traditional digital items: they’re unique, provably scarce, liquid, and usable across multiple applications. At OpenSea, we're excited about building a brand new economy from the ground up based on true digital ownership and are proud to be recognized as Y Combinator's #27 ranked top private company.

When hiring candidates, we look for signals that a candidate will thrive in our culture, where we default to trust, embrace feedback, grow rapidly, and love our work. We also know how critical it is to celebrate and support our differences. Employing a team rich in diverse thoughts, experiences and opinions enables our employees, our product and our community to flourish. We are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.

We are looking for a Head of Security reporting into the the VP of Engineering to drive a broad set of security initiatives across the company. This person will be building a new security team from the ground up, focused on product, infrastructure, and security architecture review. Will have a direct impact on safety and security of our users and will be working across departments, including product, design and community teams

Responsibilities - Establish company-wide web security standards and in partnership with developers, create automated processes to assess and enforce those standards. - Building world class product security with a strong focus on engineering rigor and engineering aptitude - Develop policies and guidelines to make it easier for non-security minded people to understand how to be secure. - Managing bug bounty programs and collaborating with network of independent security researchers. - Knowledge of state of the art vulnerabilities and attack techniques with a depth of technical expertise for designing and building tooling to scale impact.

Desired Experience - Experience with any combination of the following: mobile security, threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security. - Advanced knowledge and understanding of security engineering. - Proven ability and experience in building and managing high class security team. - Experience with multiple programming languages. - Strong written and verbal communication skills. - Very self-driven, able to keep things moving forward even in the face of ambiguity and fast change. - Ability to develop your own tools as needed in a variety of programming languages. - Experience with smart contract review is a big plus.