Director, Ecosystem Product Security

Skills

About the Role

You will lead security strategy for the Stellar ecosystem and Foundation-developed systems, infrastructure, and treasury-related responsibilities. You will establish practical security standards, guidance, and coordination mechanisms for shared risks and incident response. You will drive secure development, architecture reviews, threat modeling, vulnerability management, bug bounty programs, and product incident response. You will partner across Engineering, Finance, Legal, IT, and Corporate Security to implement controls and operating practices. You will also build and lead a security team, set measurable execution plans, and represent the Foundation externally on ecosystem security.

Requirements

• 10+ years of security experience, including significant senior leadership experience
• 5+ years leading security programs, teams, or functions
• Experience owning security outcomes for complex, high-consequence production systems
• Deep product and application security experience
• Familiarity with blockchain and decentralized system security
• Ability to assess and prioritize risks involving protocol design, smart contracts, wallets, validators, dependencies, and governance mechanisms
• Experience driving security improvements across multiple teams, organizations, or ecosystem participants
• Experience handling high-severity incidents and disclosure processes
• Experience building, leading, and developing security teams
• Ability to set strategy, translate it into execution, and deliver measurable outcomes
• Experience operating where security failures could cause financial loss, operational disruption, or loss of trust

Responsibilities

• Define and lead security strategy across the Stellar ecosystem and Foundation-owned systems
• Raise the security baseline for wallets, infrastructure providers, custodians, issuers, and validators
• Publish actionable security guidance, reference patterns, and expectations
• Build coordination mechanisms for shared risks, incident response, and ecosystem security improvements
• Own security outcomes for Foundation-developed software, operated infrastructure, and treasury and custody responsibilities
• Partner with Engineering, Finance, Legal, IT, and Corporate Security to implement security controls and practices
• Lead secure development across architecture, threat modeling, vulnerability management, bug bounty programs, and product incident response
• Build and lead a high-performing security team
• Represent the Foundation externally on ecosystem security

Benefits

• Health, dental, and vision coverage
• Flexible time off
• 15 company holidays and a company-wide holiday break
• Paid parental leave
• Paid pregnancy disability leave
• Gym reimbursement
• Life and accidental death and dismemberment insurance
• Short-term and long-term disability coverage
• 401K with 4% match
• Health and Dependent Care FSA accounts
• Commuter benefits with employer contribution
• Health Savings Account with employer contribution
• Family building benefits through Kindbody
• Wellbeing benefits through One Medical, Rightway, and Headspace
• Daily lunch and snacks in the office
• Company retreats