Head of Security

Security Strategy & Leadership: Build and own XMTP’s comprehensive security strategy: Establish a layered defense model and Create high-clarity frameworks for risk, readiness, response, and prioritization.

Internal & Operational Security: Define and enforce device, tooling, authentication, and access standards, oversee MDM, hardware key enforcement, internal permissions, and secrets management and implement systems that assume compromise and minimize blast radius.

Cybersecurity & Technical Defense: Lead the digital defense of XMTP’s engineering, infrastructure, cloud systems, and protocol interfaces, own threat detection, incident response, monitoring, and vulnerability management, partner with Engineering to harden production environments, CI/CD pipelines, and secure key material.