Posted 4 months ago
Senior Information Security Consultant
AI Summary
Senior Information Security Consultant who will lead security assessments, threat modeling, and security governance for a crypto-focused protocol. Acts as a hands-on contributor providing technical guidance across cryptography, cloud security, and secure infrastructure.
About this role
World Foundation is looking for a Senior Information Security Consultant. This is a role for a hands-on single contributor to support the Foundation in its role to perform oversight of the World protocol. This is not a role for box-tickers; you will be expected to think from first principles to solve novel security challenges at a global scale. Your work will ensure the protection and integrity of a protocol designed for the majority of humanity.
Key responsibilities
Work with protocol, engineering, and privacy teams to provide guidance on security best practices and solutions
Lead cybersecurity and IT risk assessments, support the development, and provide recommendations on risk mitigations and control plans
Perform threat modelling and advise on solutions in particular with respect to crypto-related products and other technologies using advanced cryptography solutions
Develop and improve security standards and frameworks to meet the future needs of World
Monitor and analyze emerging security trends and share insights with the relevant stakeholders
Deliver security training and awareness sessions tailored to various technical audiences
Required experience
You have 6+ years of hands-on experience in Product Security, Application Security, or Cloud Security.
You are confident in providing technical guidance to team members across cryptography, network design, application security, data protection, identity and access management, and related areas.
You are proficient in code reviews
You have extensive experience securing modern AWS architectures and developing secure infrastructure-as-code (e.g., Terraform and CDK).
You have significant experience in leading threat modeling sessions and providing actionable guidance to engineering teams.
You have experience in developing security governance frameworks as well as producing required security outputs