Security Lead, Web3 - Remote

Overview

The Aptos Foundation is committed to growing the Aptos ecosystem in a safe, secure, and scalable way. As we expand our global presence, secure development and responsible participation in the Web3 world is more critical than ever. We're looking for a Security Lead, Web3 to organize security strategy and incident response, help grow internal security culture, and serve as a key bridge between technical development and ecosystem integrity.

In Short

• Own and lead the security function at the Aptos Foundation, including endpoint, infrastructure, and data protection strategy
• Provide hands-on technical insight into smart contract updates, protocol-level debugging, and developer support as needed
• Serve as a thoughtful, rigorous security voice in the broader Web3 ecosystem
• Evaluate and implement security tools and services such as device management and threat detection
• Lead incident response planning and execution across a globally distributed team
• Partner with Labs teams ensuring clear coordination without compromising Foundation autonomy

Requirements

• 5+ years in security roles, ideally with hands-on engineering experience
• Prior experience working in or around Web3/crypto environments
• Familiarity with endpoint protection, secure cloud configurations, and decentralized tech stacks
• Able to roll up sleeves and debug protocol- or application-level issues
• Low-ego, high-rigor approach
• Strong judgment in distinguishing operational security needs from compliance requirements
• Ability to grow and lead a small security team over time

Benefits

• Dynamic, high-autonomy environment
• Opportunity to build systems rather than maintain existing ones