Head of Security Remote (anywhere in United States) + 1 more

About Helius

Helius is a leading developer platform on the Solana blockchain, dedicated to inspiring and accelerating the creation of crypto-powered software. Customers like Coinbase, Jupiter, and Phantom use Helius to power their applications on Solana.

We’ve raised over $34m from Coinbase, Haun Ventures, Founders Fund, Foundation Capital, 6th Man Ventures, Reciprocal Ventures, Chapter One and angel investors including Solana co-founders Anatoly Yakovenko and Raj Gokal, and Balaji Srinivasan. Our team members have previously built mission-critical, scalable infrastructure at AWS, Coinbase, Stripe, Google, Digital Ocean, and more.

Read our Helius Manifesto to see how we work and what we value.

About the Role

We’re hiring our first Head of Security. You’ll own security across Helius and lead it hands-on: doing the work yourself across our engineering platform while building toward a team. You’ll report to our COO and Head of Engineering, and our leadership team will depend on you to understand, manage, and make clear calls on risk.

Your priorities are to establish a strong security posture across our engineering platform and to own incident response. You’ll have real authority and a clear mandate to protect a company operating critical infrastructure at scale.

What You'll Do

Lead security at Helius, setting direction and owning execution across infrastructure, cloud, and production systems

Own incident response end to end: detection, response, runbooks, on-call readiness, and regular tabletop exercises

Establish a strong security posture across our engineering platform, including identity and access management, secrets and key management, network segmentation, logging, monitoring, and detection

Review and manage third-party and supply-chain risk

Partner with engineering to embed security into how we build and ship, without becoming a bottleneck

Lead our compliance roadmap and respond to customer security reviews

Hire, develop, and grow the security team as we scale

Own the security strategy and roadmap, and maintain our threat model and risk register, prioritizing against real risk

Communicate clearly about risk with executives, engineers, and customers

What We're Looking For

8+ years in security, including experience securing high-availability, internet-facing infrastructure at scale

Strong engineering skills: you read and write code and can dig into systems yourself

Deep expertise in cloud security, bare metal and production environments

Hands-on experience with detection and response, and you’ve led through a real security incident

Experience building a security program or significantly scaling a security function

Experience securing developer products, APIs, or platforms

Strong grasp of secrets and key management

Comfortable moving fast, iterating, and making good decisions under pressure

Pragmatic and high-ownership: you do the work and don’t wait for a large team or established tooling

Clear communicator who can partner with engineers and say no without being a blocker

Comfortable working in a fully remote, async-friendly team

Nice to Have

Experience leading a SOC 2 or similar audit

Prior security leadership at a high-growth startup

Why Helius?

High-impact work: Your code will power applications used by millions across the Solana ecosystem, including Coinbase, Jupiter, and Phantom.

Serious engineering: Build fast, reliable systems and user experiences across distributed infra, high-throughput backends, and modern frontend stacks.

Ownership & growth: Lead critical initiatives, influence architecture and product direction, and take on more responsibility as the company scales.

Remote-first flexibility: Work where you’re most effective with a flexible, fully distributed team.

Competitive comp & perks: Market-leading salary, meaningful equity, generous vacation, wellness budgets, and support for learning and travel.

Mission-driven team: Join ambitious builders who move fast, take ownership, and are shaping the future of decentralized apps.