World Foundation

Support oversight of the protocol by providing security guidance, conducting risk assessments, threat modeling, and developing security standards. | Requires 6+ years in Product, Application, or Cloud Security, proficiency in cryptography, code reviews, AWS security, infrastructure-as-code, and security frameworks. | World Foundation is looking for a Senior Information Security Consultant. This is a role for a hands-on single contributor to support the Foundation in its role to perform oversight of the World protocol. This is not a role for box-tickers; you will be expected to think from first principles to solve novel security challenges at a global scale. Your work will ensure the protection and integrity of a protocol designed for the majority of humanity. Key responsibilities • Work with protocol, engineering, and privacy teams to provide guidance on security best practices and solutions • Lead cybersecurity and IT risk assessments, support the development, and provide recommendations on risk mitigations and control plans • Perform threat modelling and advise on solutions in particular with respect to crypto-related products and other technologies using advanced cryptography solutions • Develop and improve security standards and frameworks to meet the future needs of World • Monitor and analyze emerging security trends and share insights with the relevant stakeholders • Deliver security training and awareness sessions tailored to various technical audiences Required experience • You have 6+ years of hands-on experience in Product Security, Application Security, or Cloud Security. • You are confident in providing technical guidance to team members across cryptography, network design, application security, data protection, identity and access management, and related areas. • You are proficient in code reviews • You have extensive experience securing modern AWS architectures and developing secure infrastructure-as-code (e.g., Terraform and CDK). • You have significant experience in leading threat modeling sessions and providing actionable guidance to engineering teams. • You have experience in developing security governance frameworks as well as producing required security outputs