Head of Blockchain Security
Bullish helps you trade cryptocurrencies securely through a regulated exchange that combines traditional order books with automated market making.
Funding history
About Bullish
Bullish helps institutional traders execute cryptocurrency transactions through a regulated Gibraltar-licensed platform. You can trade spot assets, access margin funding, and trade perpetual futures with cross-collateralized accounts. The exchange combines traditional central limit order books with automated market making to provide consistent liquidity and tight spreads across market conditions.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own and improve the security posture of blockchain infrastructure, custody systems, and smart contract protocols. You will lead audits, assess protocol risks, build monitoring and detection systems, design emergency-response workflows, evaluate custody and treasury controls, and create scalable security frameworks. You will advise technical and executive stakeholders on prioritized security risks.
Requirements
- 7+ years in cybersecurity, including 5+ years in blockchain and smart contract security
- Experience assessing Solidity, Rust, and/or Move smart contracts
- Background in C/C++, Linux, and cloud-native architectures including AWS, Azure, and GCP
- Experience in penetration testing, application security, offensive security, design reviews, and threat modeling
- Expertise in applied cryptography, PKI, encryption, and network protocols
- Knowledge of institutional custody infrastructure and DeFi protocols across Ethereum, Solana, Stacks, and Sui
Responsibilities
- Lead architectural reviews and security audits of Solidity, Rust, and Move smart contracts
- Oversee third-party audits for high-complexity releases
- Produce prioritized technical risk reports and advise stakeholders
- Build and maintain blockchain monitoring, alerting, and automated detection systems
- Design and operate emergency exit workflows and incident-response exercises
- Assess institutional custody systems, treasury controls, and vendor infrastructure
- Build scalable security frameworks and processes
