Head of Security
- Level
- Lead
- Work type
- Remote · North America
Not stated in the posting: salary, visa.
Open. First seen 2 November 2026.
About the role
About Helius
Helius is a leading developer platform on the Solana blockchain, dedicated to inspiring and accelerating the creation of crypto-powered software. Customers like Coinbase, Jupiter, and Phantom use Helius to power their applications on Solana.
We’ve raised over $34m from Coinbase, Haun Ventures, Founders Fund, Foundation Capital, 6th Man Ventures, Reciprocal Ventures, Chapter One and angel investors including Solana co-founders Anatoly Yakovenko and Raj Gokal, and Balaji Srinivasan. Our team members have previously built mission-critical, scalable infrastructure at AWS, Coinbase, Stripe, Google, Digital Ocean, and more.
Helius's standard text
Read our Helius Manifesto to see how we work and what we value.
About the Role
We’re hiring our first Head of Security. You’ll own security across Helius and lead it hands-on: doing the work yourself across our engineering platform while building toward a team. You’ll report to our COO and Head of Engineering, and our leadership team will depend on you to understand, manage, and make clear calls on risk.
Your priorities are to establish a strong security posture across our engineering platform and to own incident response. You’ll have real authority and a clear mandate to protect a company operating critical infrastructure at scale.
What You'll Do
- Lead security at Helius, setting direction and owning execution across infrastructure, cloud, and production systems
- Own incident response end to end: detection, response, runbooks, on-call readiness, and regular tabletop exercises
- Establish a strong security posture across our engineering platform, including identity and access management, secrets and key management, network segmentation, logging, monitoring, and detection
- Review and manage third-party and supply-chain risk
- Partner with engineering to embed security into how we build and ship, without becoming a bottleneck
- Lead our compliance roadmap and respond to customer security reviews
- Hire, develop, and grow the security team as we scale
- Own the security strategy and roadmap, and maintain our threat model and risk register, prioritizing against real risk
- Communicate clearly about risk with executives, engineers, and customers
What We're Looking For
- 8+ years in security, including experience securing high-availability, internet-facing infrastructure at scale
- Strong engineering skills: you read and write code and can dig into systems yourself
- Deep expertise in cloud security, bare metal and production environments
- Hands-on experience with detection and response, and you’ve led through a real security incident
- Experience building a security program or significantly scaling a security function
- Experience securing developer products, APIs, or platforms
- Strong grasp of secrets and key management
- Comfortable moving fast, iterating, and making good decisions under pressure
- Pragmatic and high-ownership: you do the work and don’t wait for a large team or established tooling
- Clear communicator who can partner with engineers and say no without being a blocker
- Comfortable working in a fully remote, async-friendly team
Nice to Have
- Experience leading a SOC 2 or similar audit
- Prior security leadership at a high-growth startup
Why Helius?
- High-impact work: Your code will power applications used by millions across the Solana ecosystem, including Coinbase, Jupiter, and Phantom.
- Serious engineering: Build fast, reliable systems and user experiences across distributed infra, high-throughput backends, and modern frontend stacks.
- Ownership & growth: Lead critical initiatives, influence architecture and product direction, and take on more responsibility as the company scales.
- Remote-first flexibility: Work where you’re most effective with a flexible, fully distributed team.
- Competitive comp & perks: Market-leading salary, meaningful equity, generous vacation, wellness budgets, and support for learning and travel.
- Mission-driven team: Join ambitious builders who move fast, take ownership, and are shaping the future of decentralized apps.
What this role asks for
Particular to this role
IAM
Rare in Helius's other 9 open postings.
Standard for security roles
AWS
Common in security postings at any company.
In most of Helius's ads
Blockchain
Named in most of its open postings, whatever the role.
98% of this description is written for the role. The rest is Helius's standard text, folded away below.
Compared with Helius's other open jobs.
The team: Engineering HIRES STEADILY
This role is one of 6 open in Engineering. 1 was posted in the last 30 days and the oldest in November: a team that hires all year rather than one being built.
WHAT THE TEAM WORKS WITH, ACROSS ITS POSTINGS
Blockchain (6 of 6), Rust (4 of 6), AWS (3 of 6), Golang (3 of 6), C++ (2 of 6), ClickHouse (2 of 6), Grafana (2 of 6)
OTHER ROLES ON THIS TEAM
- Platform Engineer, Infrastructure posted Sep 28
- Senior Product Manager posted Sep 14
- Senior Software Engineer, Backend posted Aug 19
- Staff Software Engineer, Backend posted Aug 19
- Platform Engineering Lead posted Nov 19
From the team and dates on Helius's own job board.
Salary context
9 other open postings titled Head of Security state a salary: median USD 250,000 to USD 300,000 a year.
Similar jobs
- Cloud Platform Architect at Morgan Stanley
Shares 3 skills: Blockchain, IAM, AWS · Lead level · same country - Staff Engineer, Public Sector (FedRAMP) at Chainalysis Government Solutions
Shares 3 skills: Blockchain, IAM, AWS · same country - Engineering Manager, Infrastructure (Privy) at Stripe
Shares 2 skills: Blockchain, AWS · Lead level · same country - Security Architect (AI & Cloud) at Plain Concepts
Shares 2 skills: Blockchain, IAM · Lead level - Test Engineering Associate Director at DTCC
Shares 2 skills: Blockchain, AWS · Lead level · same country - Technical Recruiter at Helius
Also at this company
More jobs like this
Is this your posting? Email info@careerholo.com to have it removed.