Head of Security
Helius is an enterprise-grade Solana development platform offering RPCs, APIs, data streaming tools, and 24/7 customer support.
Funding history
Projects
About Helius
Helius is an API platform that empowers developers to build on Solana by providing enhanced data, insights, and automation. Their APIs offer real-time data, historical data, token metadata, and more. Helius aims to make building on Solana easier and more accessible for developers.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead security hands-on across infrastructure, cloud, and production systems while building the security team. You will establish and maintain the security posture of the engineering platform, own end-to-end incident response, manage risk, support compliance, and communicate security priorities with executives, engineers, and customers.
Requirements
- 8+ years of security experience, including securing high-availability internet-facing infrastructure at scale
- Strong engineering skills, including reading and writing code and investigating systems
- Deep expertise in cloud security, bare metal, and production environments
- Hands-on detection and response experience, including leading a real security incident
- Experience building a security program or significantly scaling a security function
- Experience securing developer products, APIs, or platforms
- Strong knowledge of secrets and key management
- Ability to move quickly, iterate, and make decisions under pressure
- Ability to communicate clearly and partner with engineers
Responsibilities
- Lead security strategy and execution across infrastructure, cloud, and production systems
- Own end-to-end incident response, including detection, response, runbooks, on-call readiness, and tabletop exercises
- Establish security controls for identity and access management, secrets and key management, network segmentation, logging, monitoring, and detection
- Review and manage third-party and supply-chain risk
- Partner with engineering to embed security into development and delivery processes
- Lead the compliance roadmap and respond to customer security reviews
- Hire, develop, and grow the security team
- Maintain the security strategy, roadmap, threat model, and risk register
- Communicate risk clearly with executives, engineers, and customers
Benefits
- Flexible fully distributed remote work
- Meaningful equity
- Generous vacation
- Wellness budgets
- Support for learning and travel
