Who We Are:
Galaxy is a global leader in digital assets and data center infrastructure, delivering solutions that accelerate progress in finance and artificial intelligence. Our institutional digital assets platform spans trading, investment banking, asset management, staking, self-custody, and tokenization technology. We work at the intersection of finance and technology, helping institutions, startups, and developers navigate a digitally native economy.
Who You Are:
The Blockchain Security Lead owns the security posture of on-chain systems and protocols across the organization. This role blends strategic leadership with deep hands-on expertise, overseeing a small team of blockchain security engineers while actively contributing to design reviews, threat modeling, and code audits. You’ll partner closely with on-chain product and engineering teams to embed security into architecture, development, and operations.
What You’ll Do:
- Lead, mentor, and grow a team of blockchain security engineers.
- Define and evolve the blockchain security strategy and roadmap.
- Serve as a trusted security partner to product, protocol, and infrastructure teams.
- Lead threat modeling and architecture reviews for on-chain systems.
- Perform and guide security reviews and audits of smart contracts (Solidity, Rust/Solana) and backend services and supporting infrastructure.
- Design and implement reusable security controls, patterns, and reference architectures.
- Support secure deployment of cloud-native infrastructure (containers, Kubernetes).
- Research emerging blockchain threats, exploits, and mitigations, and translate them into actionable controls.
- Leverage AI tools to improve productivity, decision-making, and output quality in your day-to-day work.
What We’re Looking For:
- Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience).
- 10+ years of security software engineering experience.
- 5+ years working with blockchain technologies and smart contract security across multiple chains.
- Experience leading or mentoring a small, highly technical team.
- Published material on vulnerabilities/security bugs within the Web3 community.
- Expertise in secure SDLC, threat modeling, and application architecture review.
- Strong familiarity with smart contracts (Solidity, Rust), cloud-native environments (Docker, Kubernetes), authentication/authorization, and TLS/PKI.
- Clear, confident communicator across technical and non-technical audiences.
What We Offer:
- Competitive base salary and discretionary bonus.
- Hybrid/Flexible Working Arrangements.
- Flexible Time Off (paid).
- 3% 401(k) company contribution.
- Company-paid health and protective benefits for employees and dependents.
- Generous paid Parental Leave and family planning benefits.