The Security Lead will define and execute a comprehensive security strategy, oversee security initiatives and incidents, and foster a security-centric culture within the organization.
Location: Midtown, New York, NY (In-person Mon–Thurs, with Optional Remote Fridays )
Team: Engineering – Security & Infrastructure
Company Description
At Fun.xyz, we believe a tokenized future is a beneficial inevitability, granting financial emancipation to everyone with an internet connection. For a blockchain-first global economy to exist, value exchange must become intuitive, secure, and seamless.
Enter Checkout - the highest converting payment solution in web3. By integrating Checkout, dApps enable users to complete any on-chain action using crypto from a wallet, centralized exchange, or on-ramped fiat from a card or bank account. With access to market-leading routing and their asset portfolio at the point of sale, users are faster, stickier, and more engaged. For dApps, Checkout scales their user acquisition potential without launching new chains or integrating multiple third party providers.
We built Checkout because we envision a world where anyone, anywhere, can purchase anything with any asset. If that sounds like a vision you can get behind, we want to hear from you.
About the Role
We're looking for our first dedicated security hire to own and implement our comprehensive security strategy. This high-impact role reports to the CTO with significant opportunity to build our security foundation and grow into broader leadership as we scale.
You will ensure we maintain robust security postures across application security, corporate security, detection & response, IT infrastructure, and smart contract security. This role is perfect for a crypto-native security leader who thrives on building programs from scratch and can navigate the unique challenges of Web3 infrastructure.
Responsibilities
- Own and implement Fun's comprehensive security strategy across all domains - application security, corporate security, IT, smart contract security, and detection & response
- Lead smart contract security initiatives including managing auditor relationships, coordinating audits, and working with engineers to remediate any findings
- Build and maintain secure development lifecycle practices, including code reviews, vulnerability assessments, and penetration testing
- Lead security incident response efforts, conduct post-mortems, and contribute to general team incident response
- Oversee bug bounty programs and manage responsible disclosure processes
- Establish security awareness training and champion security culture across the organization
Requirements
- 5+ years in security with experience across multiple security domains
- Exposure to smart contract security and audit processes
- Exceptional communicator who can articulate security risks and tradeoffs to engineers, clients, and executives
- Builder mindset and strong execution skills
- Ability to balance security requirements with business velocity in fast-paced environments
Nice To Have
- Previously worked at crypto startup or Web3 infrastructure company
- Experience securing payment systems or financial infrastructure
- Background with SOC2, PCI-DSS, or other compliance frameworks
- Track record building security programs at high-growth startups
- Auditor or security researcher experience
Location and Work Environment
This role is primarily in-person at our headquarters in Midtown, New York, NY. We collaborate together in-office Monday through Thursday, with optionally remote Fridays.
Top Skills
Application Security
Bug Bounty Programs
Corporate Security
It Infrastructure
Pci-Dss
Penetration Testing
Security Incident Response
Smart Contracts
Soc2
Vulnerability Assessments
Fun.xyz New York, New York, USA Office
New York, NY , United States, 10003
Similar Jobs
Legal Tech • Other • Professional Services • Real Estate • Business Intelligence • Consulting • Financial Services
The Cloud Security Lead will oversee cloud security practices, develop strategies, manage client relationships, and lead global teams to deliver solutions in multi-cloud and hybrid environments.
Top Skills:
AWSAzureDockerGCPKubernetes
Automotive • Cloud • Greentech • Information Technology • Other • Software • Cybersecurity
Lead Cloud Security and Compliance practice at RapidScale, focusing on AI-driven security strategies, team management, client engagements, and developing innovative security offerings.
Top Skills:
AIAWSAzureCybersecurityGoogle
16 Days Ago
Artificial Intelligence • Cloud • Fintech • Information Technology • Insurance • Financial Services • Big Data Analytics
The role involves leading cybersecurity awareness programs, managing risk education, ensuring compliance with regulations, and reporting to leadership on training effectiveness.
Top Skills:
CisInteractIsoNistNydfsTableauWordpress
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
