Head of Cybersecurity

30k - 40k PLN30 000 - 40 000 PLN/ mies./ mies.B2BB2B (netto)

C-Level / ManagerZdalnie·WarszawaFull-time·B2B

#477958·Dodano 2 dni temu·7

Źródło: RedStone

Aplikuj teraz

Tech Stack / Keywords

AWSIAMTerraform TypeScript GitHub Actions SIEMXDRKMSCloudTrailWAF

Podsumowanie oferty

Lead cybersecurity for RedStone’s blockchain oracle infrastructure, protecting the services that deliver data to blockchain applications. The role covers AWS and cloud security, threat detection and response, penetration testing, and company-wide operational-security standards.

Wymagania

5+ years in cybersecurity, including 3+ years leading security for production-critical systems.
Hands-on knowledge of AWS security and cloud-service protection, including IAM, Organizations and SCPs, VPC design, KMS, CloudTrail, and WAF; securing containers (EKS/ECS) and serverless workloads.
Experience securing and operating critical financial infrastructure, such as a bank, exchange, payments, trading, custody, or market-data system.
Deep understanding of threat detection, including building detections, running a SIEM or XDR platform, threat hunting, and leading incident response.
Hands-on penetration-testing experience and fluency with standard penetration-testing and cloud-security tooling.
Experience designing and rolling out company-wide OpSec standards, including getting non-engineers to follow them.
Ability to write Terraform, TypeScript scripts, and GitHub Actions workflows to build controls.

Nice to have:

Blockchain infrastructure experience, including oracle or validator nodes, relayers and RPC infrastructure; signing keys on HSMs, KMS, MPC, or hardware signers; multisig and admin-key setups; smart-contract security and DeFi threat models.
Hands-on experience with AI tooling for threat detection and security operations, including AI-assisted alert triage and investigation, anomaly detection, and LLM-based agents for SecOps.

Obowiązki

AWS and cloud security:

Build account structure and guardrails, manage IAM and least privilege, network segmentation, KMS and Secrets Manager, CloudTrail and VPC Flow Logs, and WAF across AWS and the SaaS estate.

Threat detection and response:

Build and run the SIEM and detection pipeline, including detections for signing activity, privilege changes, pipeline tampering, and anomalous feed behaviour.
Manage alerting and on-call escalation, incident-response playbooks, tabletop exercises, and post-mortems.

Penetration testing and offensive security:

Run internal penetration tests and red-team exercises against AWS accounts, APIs, RPC endpoints, relayers, and CI/CD.
Scope and manage external penetration tests and audits; triage Cantina bug-bounty findings and drive fixes.

Critical-infrastructure resilience:

Establish production and smart-contract deployment change controls, dual control for sensitive operations, break-glass procedures, availability and latency SLOs, and DDoS posture.

Company-wide OpSec standards:

Define and roll out operational-security standards covering device and endpoint baselines, identity and account hygiene, hardware-signer handling, travel and social-engineering protocols, phishing resilience, security onboarding, and training.
Measure adoption and close gaps.

Blockchain infrastructure security:

Protect oracle nodes, on-chain relayers, RPC endpoints, and push infrastructure across 70+ chains.
Protect signer and deployer keys using HSM and KMS; manage key ceremonies and rotation, multisig and admin-key controls for smart-contract deployments and upgrades, and monitoring for anomalous on-chain activity.

AI in security operations:

Evaluate and adopt AI tooling for detection, triage, and investigation where it outperforms rules alone, and secure the company’s use of AI tools and agents.

Secure software delivery:

Establish branch protection, code-review gates, signed artifacts, and dependency and secrets scanning in GitHub Actions.

Benefity

Token allocation after 3 months of cooperation.
Private healthcare and a Multisport card.
Budget for certifications, conferences, and security training.
Company equipment and a hardware budget for the role.
Company offsites and team events.

Udziały pracownicze

Opieka zdrowotna

Karta sportowa

Budżet konferencyjny

Dofinansowanie szkoleń

Spotkania integracyjne

Inne informacje

Recruitment process: introductory call; technical interview on cloud and detection; technical leadership case covering OpSec rollout, blockchain infrastructure, and incident response; final interview with the founders.

RedStone

6 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz