Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 27 days ago

Head of Blockchain Security

Bullish7 open roles

Where
New York
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowHead of Blockchain SecurityBullish · New York

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Bullish's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.7%1 day
  2. 3.6%3 days
  3. 8.1%7 days
  4. 15.1%14 days
  5. 34.0%30 days
This job: posted 27 days ago

The posting

About Bullish

Bullish is an institutionally focused global digital asset platform that provides market infrastructure and information services. These include: Bullish Exchange – a regulated and institutionally focused digital assets spot and derivatives exchange, integrating a high-performance central limit order book matching engine with automated market making to provide deep and predictable liquidity. Bullish Exchange is regulated in Germany, Hong Kong, and Gibraltar. CoinDesk Indices – a collection of tradable proprietary and single-asset benchmarks and indices that track the performance of digital assets for global institutions in the digital assets and traditional finance industries. CoinDesk Data - a broad suite of digital assets market data and analytics, providing real-time insights into prices, trends, and market dynamics. CoinDesk Insights – a digital asset media and events provider and operator of Coindesk.com, a digital media platform that covers news and insights about digital assets, the underlying markets, policy, and blockchain technology.

Reports to:

Chief Information Security Officer

About the Role

We are looking for an exceptional Head of Blockchain Security to own and elevate the end-to-end security posture of our blockchain infrastructure, custody systems, and smart contract protocols.

In this role, you will operate as both a high-impact technical authority and a strategic partner to internal teams, protocol founders, and external security partners. You will design scalable security frameworks, lead complex audits across multi-chain environments, and engineer rapid-response mechanisms to protect assets in high-stakes environments. We operate lean, move fast, and value high emotional intelligence alongside deep technical rigor.

This role is based in NYC and will be required to work onsite at our office a minimum of 4 days per week.

Responsibilities:

  • Smart Contract Audit & Engineering: Lead deep-dive architectural reviews and security audits of smart contracts (Solidity, Rust, Move), focusing on protocol-level vulnerabilities. Oversee external third-party audits for high-complexity releases.
  • Risk Advisory & Stakeholder Alignment: Produce clear, prioritized technical risk reports. Serve as the primary security advisor to protocol founders, engineering leads, and executive leadership, translating complex risks into actionable decisions.
  • Toolchain & Automation Architecture: Build, deploy, and maintain robust blockchain monitoring, alerting, and automated detection systems across major ecosystems.
  • Emergency Response & Crisis Readiness: Design and operate automated emergency exit workflows to protect protocol assets under adverse market or security conditions. Facilitate cross-industry incident response tabletop exercises.
  • Custody, Treasury & Supply Chain Assurance: Conduct rigorous technical assessments of external institutional custody systems, internal treasury controls, and third-party vendor infrastructure.
  • Scalable Operations: Build repeatable security frameworks and processes that enable our security program to scale seamlessly alongside aggressive organizational growth.

Experience & Qualifications:

  • Experience: 7+ years in cyber security, with 5+ years dedicated specifically to blockchain and smart contract security
  • Technical Depth: Hands-on experience assessing smart contracts written in Solidity, Rust, and/or Move. Strong background in C/C++, Linux, and cloud native architectures (AWS, Azure, GCP).
  • Security Discipline: Proven background in senior-level penetration testing, application security, offensive security methodologies, design reviews, and threat modeling (OWASP Top 10, SANS CWE 25).
  • Encryption & Network Infrastructure: Deep expertise in applied cryptography (PKI, algorithms, encryption at rest/in transit) and network/protocol fundamentals (IP, DNS, HTTP, SSL/TLS)
  • Multi-Chain Ecosystem Knowledge: Strong working knowledge of institutional custody infrastructure and major DeFi protocols across Ethereum, Solana, Stacks, and Sui.
  • High EQ & Communication: Ability to articulate critical risks concisely to technical teams and non-technical stakeholders alike. Outstanding self-management and operational autonomy across global time zones.

Preferred:

  • Offensive security certifications (OSCP, OSWE, OSCE) or related credentials.
  • Track record of public security research, published vulnerability papers, or presentations at major industry conferences.

Bullish US LLC & CoinDesk Inc. are committed to offering competitive compensation and benefits. The anticipated base salary for this position is $260,000 - $275,000 + discretionary annual target bonus + performance incentives/benefits. Offered salary will be reflective of job related knowledge, skills and commensurate experience.

Bullish is proud to be an equal opportunity employer. We are fast evolving and striving towards being a globally-diverse community. With integrity at our core, our success is driven by a talented team of individuals and the different perspectives they are encouraged to bring to work every day.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Bullish's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Bullish's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Bullish's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.