Head of Security
Spiko is a French MiFID-licensed fintech that issues tokenized money market funds invested in treasury bills and bank swaps, offering daily yields with daily liquidity.
Maintainer signals as of 9/2/2026
Funding history
Projects
About Spiko
Spiko is a Paris-based fintech licensed by the French ACPR as a MiFID investment firm, offering regulated tokenized money market funds to businesses and individuals. Its products invest in treasury bills from core Eurozone countries or use collateralized total return swaps with Tier 1 banks to deliver daily interest. Fund shares are issued as ERC-20 tokens on public blockchains including Ethereum, Stellar, Arbitrum, and Polygon, enabling 24/7 transfers and API access. Spiko acts as transfer agent, tokenization platform, and broker. Products are supervised by the French AMF.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own application, infrastructure, cloud, identity, access, vulnerability-management, detection, and incident-response security. You will define the security roadmap, lead compliance controls and evidence collection, support security due diligence, and help make security a business strength.
Requirements
- 5+ years of experience in security engineering roles
- Understanding of application, network, and cloud security best practices
- Experience with security audits, vulnerability management, and compliance frameworks such as ISO 27001 or SOC 2
- Familiarity with SAST, DAST, dependency scanning, and container scanning
- Experience with automated penetration-testing tools or AI-driven security testing
- Ability to work autonomously and define a roadmap
- English proficiency
Responsibilities
- Own end-to-end application, infrastructure, cloud, identity, and access security
- Define the security roadmap and priorities
- Manage vulnerabilities, penetration testing, AI-driven security testing, detection, and incident response
- Lead ISO 27001 certification and DORA implementation
- Establish security policies, controls, and evidence collection
- Support security due-diligence questionnaires and presentations
Benefits
- Stock options
- Remote work up to two days per week and one full remote week per month
- Latest-generation laptop and industry-leading software
- Health insurance fully covered
- Monthly perks budget
- 50% public-transport coverage or Forfait Mobilités Durables
- Referral bonus
- Regular afterworks and biannual offsites
Hiring Process
Screening call; hiring-manager interview; technical infrastructure and security interview; hands-on technical session; founder interviews; reference check; offer.