Founding Security Lead

Overview

CoinTracker makes cryptocurrency portfolio tracking and tax compliance simple. CoinTracker enables consumers and businesses to seamlessly track their cryptocurrency portfolio, investment performance, taxes, and more. We are a globally distributed team on a mission to enable everyone in the world to use crypto with peace of mind. Learn more about our mission, culture, and hiring process.

Some things we’re proud of

• 🛠️ Building foundational tools in the cryptocurrency space

• 📄 Over 1M tax forms generated

• 💲 $250B+ in cryptocurrency is tracked on CoinTracker (~over 5% of the entire crypto market)

• 🤝 Partnered with Coinbase, H&R Block, Intuit TurboTax, MetaMask, OpenSea, Phantom, Solana, and Uniswap

• 🗺️ Founders: Jon previously built TextNow (200M downloads), Chandan was previously a product manager at Google & Google[x]

• 💼 $100M+ venture capital raised from Accel, General Catalyst, Y Combinator, Initialized Capital, Coinbase Ventures, Kraken Ventures, Intuit Ventures, 776 Ventures, Balaji Srinivasan, Claire Hughes Johnson, Gokul Rajaram, Serena Williams, Zach Perret

• 🌴 Awesome benefits

Your mission

Define and build CoinTracker’s security foundation to meet the needs of our growing B2C, B2B, and B2B2C businesses.

Your one-year outcomes

• Define and implement the security roadmap: Identify short-term wins and establish the long-term foundation to scale CoinTracker’s security posture

• Embed security into engineering workflows: Lead application security initiatives, including threat modeling, secure code reviews, vulnerability management, and code scanning, and partner with engineering teams to proactively identify and mitigate application risks across our systems and architecture.

• Build and operationalize security monitoring and response: Establish detection, monitoring, and alerting capabilities, establish ongoing vulnerability management, define and operationalize incident response processes, and lead security postmortems to continuously improve security practices

What you will do

• Define and execute the security roadmap

• Lead the design and implementation of secure application and cloud practices, including code scanning, vulnerability management, and infrastructure hardening

• Define and implement data security and privacy controls, including encryption, secrets management, and regulatory compliance (e.g., SOC 2, GDPR)

• Establish monitoring, detection, alerting, and logging capabilities. Define and operationalize incident response playbooks, manage vulnerabilities, and lead postmortems to continuously improve processes

• Partner with engineering and product teams to embed security into the development lifecycle (threat modeling, security reviews, automation)

• Advocate for security best practices and foster a proactive security mindset across CoinTracker

What we look for

• Role-agnostic

  • Impact: Demonstrated ability to drive business impact

  • Mission alignment: Hungry and motivated about making progress towards our mission of Enabling everyone in the world to use crypto with peace of mind.

  • Trust: Say what you believe. Do what you say.

  • Communication: Able to clearly talk about the details and also zoom out to the bigger picture

• Role-specific

  • 10+ years of technical experience (Software Engineering, Security, or related), including 5+ years specifically in Security Engineering

  • Security generalist with strong hands-on expertise in application security, complemented by experience in cloud security, IAM, and security operations

  • Hands-on experience with modern cloud environments, Kubernetes, and IaC (Terraform or similar)

  • Familiarity with data protection and privacy frameworks (GDPR, SOC 2, ISO 27001, etc)

  • Experience setting up monitoring, detection, and incident response processes in a high-growth environment

  • Ability to balance pragmatism and rigor: moving fast while ensuring strong security foundations

  • Excellent communication skills to partner across engineering, product, and business teams

  • U.S. citizen and U.S. resident

  • (Bonus) Experience working in fintech or crypto domain

  • (Bonus) Previous experience as the first or early security hire at a startup

The starting salary for this position is between $210,000 - $270,000 USD. Candidate's location does not impact the posted salary range. The actual compensation offered will be based on a variety of job-related factors including relevant skills, education, and experience. This position also includes equity in CoinTracker and benefits like medical, dental, vision, 401(k), life insurance, and PTO.