Zcash Open Development Lab (ZODL)

Security Engineer

• Maintain and improve ZODL and Zcash security and resilience standards
• Administer and improve security incident response for software, supply chains, and infrastructure
• Manage responses to vulnerabilities and coordinate with external security researchers and affected projects
• Communicate security flaws and mitigations to Zcash, cryptocurrency, and information-security communities
• Build relationships with projects sharing Zcash technology and improve security disclosure processes
• Manage external security assessment providers, audits, schedules, critiques, and follow-up actions
• Advise staff on securing devices and responding to physical and virtual threats
• Onboard staff to security procedures and administer offboarding to mitigate access misuse
• Direct acquisition and maintenance of security infrastructure, devices, and software
• Budget annual security spending in line with product and company roadmaps
• Document security policies and ensure permissions follow least-privilege principles
• Support secure use of cloud computing solutions
• Ensure compliance with applicable security-related regulatory requirements and data protection law
• Work with Engineering and QA on processes, techniques, and training to prevent bugs
• Oversee proactive mitigations for software, protocol, infrastructure, and supply-chain vulnerabilities
• Collaborate on cryptographic code assurance and limiting leakage of user-activity information
• Prioritize security mitigations and refine processes for handling low-impact issues
• Review and reprioritize the security issue backlog
• Develop and maintain specifications supporting security analysis of the Zcash protocol
• Monitor developments in the wider Zcash community
• Recruit and onboard security-focused talent
• Act as the primary owner of security incident response and an internal adversarial reviewer of Zcash specifications and software

Security Director