Strong product security and/or offensive security background (penetration testing, vulnerability assessment, attack simulation, incident response)
Experience embedding security into product development: threat modeling, secure SDLC, security-by-design reviews
Hands-on software engineering ability: you can build and operate security services and automation, not just use off-the-shelf tools. Comfortable writing production code (we work heavily in Clojure; strong experience in any modern language plus willingness to learn Clojure is fine)
Solid working knowledge of blockchain and cryptocurrency fundamentals, including how blockchains, wallets, keys, and smart contracts work, enough to reason about their security (expert-level depth not required, but real familiarity is)
Strong knowledge of recent and past attack vectors and exploits, and how to remediate them
Experience with security frameworks such as OWASP and the NIST Cybersecurity Framework (CSF)
Fluency with AI-assisted engineering: using coding agents and LLMs in daily work, with good judgment about where they help, where they don't, and how to review their output critically
Familiarity with AWS, and solid grounding in operating systems, networks, databases, and infrastructure architecture
Ability to work autonomously and proactively, strong analytical/problem-solving skills, and clear written and spoken English for technical and non-technical audiences
Deeper knowledge of blockchain/crypto internals: consensus algorithms, cryptographic protocols, smart contracts
Experience auditing smart contracts (e.g. Solidity) or working with DeFi protocols
Experience integrating with third-party crypto custody/infrastructure providers (e.g. Fireblocks, Circle, and similar)
Exposure to regulatory or compliance requirements in a financial or crypto context
Experience with bug bounties and/or CTFs
Certifications such as OSCP, OSWE, or Certified Blockchain Security Professional