Blockchain Security Lead

Who We Are:

Galaxy is a global leader in digital assets and data center infrastructure, delivering solutions that accelerate progress in finance and artificial intelligence. We believe that blockchain and digital asset innovation will transform how value moves through the world – and we’re building the products and services to make that future a reality. Our institutional digital assets platform spans trading, investment banking, asset management, staking, self‑custody, and tokenization technology.

We also invest in and operate cutting‑edge data center infrastructure to power AI and high‑performance computing, addressing the growing demand for scalable energy and compute in the U.S. We work at the intersection of finance and technology, helping institutions, startups, and developers navigate a digitally native economy. Led by CEO and Founder Michael Novogratz, our team blends deep crypto expertise with institutional experience and a shared commitment to shaping the future of Web3 and AI.

Galaxy is headquartered in New York City, with offices across North America, Europe, the Middle East, and Asia. To learn more about our businesses and products, visit

We are a diverse team of free thinkers, and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission‑first approach. Our culture shapes our way of working and gets us where we want to be.

• Seek Excellence.
• Be Selective To Be Effective.
• Be Highly Aligned, Loosely Coupled.
• Disagree Transparently.
• Encourage Independent Decision‑Making.
• Build Dream Teams.

The Blockchain Security Lead owns the security posture of on‑chain systems and protocols across the organization. This role blends strategic leadership with deep hands‑on expertise, overseeing a small team of blockchain security engineers while actively contributing to design reviews, threat modeling, and code audits.

You’ll partner closely with on‑chain product and engineering teams to embed security into architecture, development, and operations—building scalable, reusable security controls that grow with the business.

• Lead, mentor, and grow a team of blockchain security engineers.
• Define and evolve the blockchain security strategy and roadmap.
• Serve as a trusted security partner to product, protocol, and infrastructure teams.
• Lead threat modeling and architecture reviews for on‑chain systems.
• Perform and guide security reviews and audits of smart contracts (Solidity, Rust/Solana) and backend services and supporting infrastructure.
• Design and implement reusable security controls, patterns, and reference architectures.
• Support secure deployment of cloud‑native infrastructure (containers, Kubernetes).
• Research emerging blockchain threats, exploits, and mitigations, and translate them into actionable controls.
• Embrace and champion the thoughtful adoption of AI to improve team performance and business outcomes.
• Leverage AI tools (e.g., generative AI, automation platforms, data copilots) to improve productivity, decision‑making, and output quality in your day‑to‑day work.

• Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience)
• 10+ years of security software engineering experience
• 5+ years working with blockchain technologies
• 5+ years working with smart contract security across multiple chains
• Experience leading or mentoring a small, highly technical team
• Published material on vulnerabilities/security bugs within the Web3 community
  
  Expertise in secure SDLC, threat modeling, and application architecture review
• Multi agent code reviews for vulnerabilities using frontier models
• Secure coding practices and in‑depth code review capability
• Strong familiarity with smart contracts (Solidity, Rust), cloud‑native environments (Docker, Kubernetes), authentication and authorization, TLS/PKI, and cloud, infrastructure, and network security
• Clear, confident communicator across technical and non‑technical audiences
• Comfortable balancing hands‑on execution with strategic…