[All remote jobs](https://jobicy.com/jobs.md)[![Airtm logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/1994f28e-221.png)](https://jobicy.com/company/airtm.md)[Airtm](https://jobicy.com/company/airtm.md) # Head of security Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/airtm.md)ShareRemote from[LATAM](https://jobicy.com/job-region/latam.md)SalaryUndisclosedDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished27 Oct 2026Apply before26 Nov 2026Listing views50Application actions3Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. Airtm is hiring a Head of Security to establish and lead security for a cross-border financial platform serving digital entrepreneurs. The role owns security strategy, incident response, application and cloud security, detection, compliance, third-party risk, and security for cryptographic keys and blockchain integrations. This leader will partner closely with engineering while remaining hands-on with AWS, Kubernetes, TypeScript/Node.js services, Terraform, CI/CD, and AI-assisted development controls. The position also includes building a security team and champions network, communicating risk to executives and the board, and leading high-stakes production incidents. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 5/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a senior, broad-scope security leadership role for a fintech and stablecoin payments environment, where failures can create material financial, operational, and regulatory impact. It requires both executive-level strategy and deep technical judgment across cloud, application, cryptographic, AI, and incident-response domains. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$180,000US market range (per year)$140k–$230k0$253.00k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer compensation was disclosed. Estimated annual USD compensation for a remote Head of Security in a fintech/security leadership role is approximately $140,000–$230,000, with a midpoint of $180,000; the yearly cadence is inferred from the senior full-time role and prevailing professional compensation conventions. ## Core skills Skills and capabilities most closely associated with this opportunity. [Security strategy](https://jobicy.com/jobs?search_keywords=Security%20strategy.md)[Incident response](https://jobicy.com/jobs?search_keywords=Incident%20response.md)[AWS security](https://jobicy.com/jobs?search_keywords=AWS%20security.md)[Kubernetes security](https://jobicy.com/jobs?search_keywords=Kubernetes%20security.md)[Application security](https://jobicy.com/jobs?search_keywords=Application%20security.md)[Threat modeling](https://jobicy.com/jobs?search_keywords=Threat%20modeling.md)[SIEM and log analysis](https://jobicy.com/jobs?search_keywords=SIEM%20and%20log%20analysis.md)[IAM and least privilege](https://jobicy.com/jobs?search_keywords=IAM%20and%20least%20privilege.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[CI/CD security](https://jobicy.com/jobs?search_keywords=CICD%20security.md)[SOC 2 compliance](https://jobicy.com/jobs?search_keywords=SOC%202%20compliance.md)[Cryptographic key management](https://jobicy.com/jobs?search_keywords=Cryptographic%20key%20management.md)[Blockchain security](https://jobicy.com/jobs?search_keywords=Blockchain%20security.md)[AI security](https://jobicy.com/jobs?search_keywords=AI%20security.md)[Vendor risk management](https://jobicy.com/jobs?search_keywords=Vendor%20risk%20management.md) Sample interview questionsHow would you prioritize security investments for Airtm during your first six months?I would begin with an asset and threat assessment focused on payment flows, wallet and key-management systems, privileged access, production infrastructure, and customer identity. I would translate findings into a risk-based roadmap that addresses critical exposure first, defines measurable control ownership, and provides executives with clear risk, cost, and delivery trade-offs. Describe how you would lead a high-severity security incident involving potential account takeover or unauthorized transactions. I would activate a predefined incident structure with clear technical, business, legal, and communications owners. The immediate priorities would be containment, evidence preservation, impact assessment, customer and regulatory obligations, and safe recovery; afterward, I would lead a blameless review that produces tracked remediation actions and improved detection. How would you embed application security into autonomous TypeScript and Node.js product teams without becoming a delivery bottleneck? I would provide paved roads: reusable secure service templates, automated dependency and code scanning, threat-modeling support for high-risk changes, secure design patterns, and clear severity-based remediation SLAs. Security champions and concise feedback in existing engineering workflows would make secure decisions easier rather than creating a separate approval gate. What controls would you establish for AI coding tools and internally deployed AI agents? I would define approved-tool and data-handling policies, review vendor and model risk, restrict secrets and sensitive data exposure, and implement monitoring for AI-assisted code changes. For agents, I would enforce least-privilege tool access, scoped credentials, human approval for consequential actions, prompt-injection defenses, evaluation testing, and audit logs. How would you secure AWS and Kubernetes infrastructure that supports financial transaction services? I would establish strong identity boundaries through least-privilege IAM and Kubernetes RBAC, centralized secrets management, network segmentation, hardened workloads and images, and protected CI/CD pipelines. Continuous logging, runtime detection, infrastructure-as-code policy checks, vulnerability management, and tested incident runbooks would provide layered prevention and response capability. Opportunity details ## About this role. ### About us: Airtm is a financial-infrastructure company building the future of the online-work economy. We are on a mission to empower the world’s growing number of Digital Entrepreneurs in the Global South, giving them the financial freedom to thrive. The problem is clear: in emerging markets, accessing the dollar economy is difficult. Cross-border payments are slow, expensive, and often lose value to inflation. This limits the potential of millions of talented individuals. Airtm’s solution is a swift and comprehensive financial platform that facilitates low-value cross-border payments and local cash-outs. As pioneers in stablecoin-payment infrastructure, Airtm has built the most advanced cross-border payment system available on the market. As a company married to the world of online work, Airtm will go beyond payments to build the necessary infrastructure the online-work economy needs to thrive. We are fostering an entirely new economy, giving individuals, communities, and countries the tools to take control of their financial destinies. ### About the Role We’re looking for a Head of Security to build and lead security at Airtm, reporting to the VP of Engineering. You’ll own the security posture of the systems that move people’s money across borders, from application code and cloud infrastructure to identity, vendors, and incident response. You’ll set the strategy, build the team and the practices around it, and stay hands-on enough to make the hard technical calls yourself. Our stack is TypeScript/Node.js microservices on Kubernetes (AWS), with React front ends, organized into autonomous product teams. Security here works as an enabler embedded in how teams ship, not a gate at the end. AI-assisted development is core to how we build, so you’ll be expected to use AI tooling fluently for security work, and to define how we adopt AI agents and LLM-powered systems safely. ### Key Responsibilities * Security Strategy & Roadmap: Define and own a risk-based security strategy for a financial platform; prioritize investment by real threat and business impact, and report on posture to executive leadership and the board * Incident Response: Own detection, response, and recovery for security incidents; maintain runbooks, lead incidents and post-incident reviews, coordinate with forensics, legal, and communications, and turn every incident into lasting improvements * Application Security: Embed security into the SDLC with threat modeling, secure design reviews, SAST/DAST/dependency scanning, and secure coding standards that engineers actually adopt * Cloud & Infrastructure Security: Partner with Infrastructure to harden AWS, Kubernetes, networking, and CI/CD pipelines; own IAM and least-privilege access, secrets management, and security in Terraform and GitOps workflows * Detection & Monitoring: Build the detection and alerting capability that finds malicious activity early, across application, infrastructure, and access logs, and tune it to keep signal high * Crypto & Key Security: Own the security model for key management, wallet and custody operations, and the blockchain integrations our payment rails depend on * Fraud & Account Security Collaboration: Work with Product and Risk teams on account takeover, abuse, and transaction-level controls * AI Security: Define guardrails for AI coding tools and for AI agents and LLM pipelines we build or deploy, including agent permissions, prompt injection, data exposure, and tool-access boundaries * Compliance & Assurance: Own our security compliance program (SOC 2 and related frameworks), audits, and customer and partner security questionnaires, aiming to make compliance a byproduct of good engineering rather than a separate burden * Vendor & Third-Party Risk: Run vendor risk assessments and security due diligence for partners, investors, and acquirers * Vulnerability & Patch Management: Establish clear SLAs by severity and keep remediation moving across teams without becoming a bottleneck * Team Building & Mentorship: Hire, grow, and lead security engineers; build a security champions network inside product teams; raise the security bar across all of engineering * On-Call & Escalation: Participate in and help shape the security escalation path for production incidents ### Required Qualifications * 8+ years of experience in information or application security, including 3+ years leading security teams or functions * Demonstrated experience leading incident response for real, high-stakes incidents, including coordination with external forensics and counsel * Strong knowledge of AWS security and Kubernetes security (IAM, network segmentation, RBAC, secrets management, container and image security) * Hands-on experience with application security in a microservices environment: threat modeling, secure code review, and dependency and supply-chain risk * Experience building detection and monitoring capabilities (SIEM, log analysis, alerting; Datadog or similar) * Experience owning or leading a compliance program such as SOC 2, ISO 27001, or PCI-DSS, including audit cycles * Ability to read and review TypeScript/Node.js code and infrastructure-as-code (Terraform); you don’t need to be a full-time developer, but you need to be credible with engineers * Experience securing CI/CD pipelines and software supply chains * Hands-on experience with AI-assisted tools (e.g., Claude Code, Cursor, GitHub Copilot) for security work, and a clear point of view on the risks of AI-generated code and agentic systems * Strong communication skills; able to explain risk to engineers, executives, regulators, and customers, and to write policies and runbooks people follow * Sound judgment under pressure; able to make fast, defensible calls with incomplete information ### Nice to Have * Background in fintech, payments, remittance, or crypto environments, especially key management, custody, and blockchain security * Experience with fraud, account takeover, and abuse prevention * Experience securing AI agents and LLM-powered systems in production (prompt injection defenses, tool-permission models, eval and red-teaming approaches) * Hands-on offensive security experience (penetration testing, red teaming) or running bug bounty programs * Experience with cloud-native security tooling (CSPM, runtime protection, policy-as-code such as OPA/Kyverno) * Familiarity with regulatory requirements for money transmission and financial services across multiple jurisdictions * Security certifications (CISSP, CISM, OSCP, AWS Security Specialty) * Experience supporting investor, buyer, or enterprise due diligence on security posture * Experience building a security function from a small base in a fast-growing engineering org ### What We Look For Beyond the technical skills, we’re looking for a leader who: * Takes ownership of security outcomes, stays calm and clear in an incident, and communicates early when risk is rising * Treats security as a partnership with engineers, building guardrails and paved roads rather than gates and tickets * Has good judgment about risk, knowing when to stop a release, when a small risk is worth the speed, and how to explain the tradeoff to the business * Improves the team around them, through mentorship, champions, and making secure choices the easy ones * Collaborates across boundaries, working with Product, Infrastructure, Legal, Compliance, and Support as one team * Knows when (and when not) to lean on AI tooling, and brings rigor to how we adopt it safely ### Compensation ### Additional Information Show more [Apply now >](https://jobicy.com/jobs/157316-head-of-security-2.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSI2NSIgaGVpZ2h0PSI2NSIgZmlsbD0ibm9uZSIgeG1sbnM6dj0iaHR0cHM6Ly92ZWN0YS5pby9uYW5vIj48ZyBjbGlwLXBhdGg9InVybCgjQSkiPjxwYXRoIGQ9Ik0wIDBINjVWNjVIMFYwWiIgZmlsbD0iIzAyOWFlYiIvPjxnIGZpbGw9IiNmZmYiIHN0cm9rZT0iI2ZmZiIgc3Ryb2tlLXdpZHRoPSIyIj48cGF0aCBkPSJNMzMuMDQ5IDE1LjQ1NGExLjQzIDEuNDMgMCAwIDAtMi4wOTcgMGwtNy41NzkgOC4xNDdhMS4zOCAxLjM4IDAgMCAwIC4wOSAxLjk3MyAxLjQ0IDEuNDQgMCAwIDAgMi4wMDgtLjA4OGw1LjEwOS01LjQ5MnYyMC42MWExLjQxIDEuNDEgMCAwIDAgMS40MjEgMS4zOTdjLjc4NSAwIDEuNDIxLS42MjUgMS40MjEtMS4zOTd2LTIwLjYxbDUuMTA5IDUuNDkyYTEuNDQgMS40NCAwIDAgMCAyLjAwOC4wODggMS4zOCAxLjM4IDAgMCAwIC4wOS0xLjk3M2wtNy41NzktOC4xNDZ6TTE2Ljc2OSAzOC40YzAtLjc3My0uNjItMS40LTEuMzg1LTEuNFMxNCAzNy42MjcgMTQgMzguNHYuMTAybC4yMTUgNi4yMjljLjIyMyAxLjY4LjcwMSAzLjA5NSAxLjgxMyA0LjIxOHMyLjUxIDEuNjA3IDQuMTcyIDEuODMzYzEuNi4yMTggMy42MzYuMjE4IDYuMTYuMjE4aDExLjI4bDYuMTYtLjIxOGMxLjY2Mi0uMjI2IDMuMDYxLS43MDkgNC4xNzItMS44MzNzMS41ODktMi41MzggMS44MTMtNC4yMThDNTAgNDMuMTEzIDUwIDQxLjA1NSA1MCAzOC41MDNWMzguNGMwLS43NzMtLjYyLTEuNC0xLjM4NS0xLjRzLTEuMzg1LjYyNy0xLjM4NSAxLjRsLS4xOSA1Ljk1OGMtLjE4MiAxLjM3LS41MTUgMi4wOTUtMS4wMjYgMi42MTJzLTEuMjI4Ljg1My0yLjU4MyAxLjAzOGMtMS4zOTUuMTktMy4yNDMuMTkzLTUuODkzLjE5M0gyNi40NjJjLTIuNjUgMC00LjQ5OC0uMDAzLTUuODkzLS4xOTMtMS4zNTUtLjE4NC0yLjA3Mi0uNTIxLTIuNTgzLTEuMDM4cy0uODQ0LTEuMjQyLTEuMDI2LTIuNjEyYy0uMTg3LTEuNDEtLjE5MS0zLjI3OS0uMTkxLTUuOTU4eiIvPjwvZz48L2c+PGRlZnM+PGNsaXBQYXRoIGlkPSJBIj48cGF0aCBmaWxsPSIjZmZmIiBkPSJNMCAwaDY1djY1SDB6Ii8+PC9jbGlwUGF0aD48L2RlZnM+PC9zdmc+) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Mozilla logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/mozilla.jpg) Mozilla Oct 27 New ### [Senior Software Engineer, Firefox Security](https://jobicy.com/jobs/157410-senior-software-engineer-firefox-security.md) Why Mozilla? Mozilla Corporation is the non-profit-backed technology company that has shaped the internet for the better over the last 25 years. We make pioneering brands like Firefox, the privacy-minded… * ![Mozilla logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/mozilla.jpg) Mozilla Oct 27 New ### [Senior Security GRC Engineer](https://jobicy.com/jobs/157406-senior-security-grc-engineer.md) Why Mozilla? Mozilla Corporation is the non-profit-backed technology company that has shaped the internet for the better over the last 25 years. We make pioneering brands like Firefox, the privacy-minded… * ![Mozilla logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/mozilla.jpg) Mozilla Oct 27 New ### [Senior Security Engineer – SecOps](https://jobicy.com/jobs/157401-senior-security-engineer-secops.md) Why Mozilla? Mozilla Corporation is the non-profit-backed technology company that has shaped the internet for the better over the last 25 years. We make pioneering brands like Firefox, the privacy-minded… * ![Socket logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/1314ce3c-221.png) Socket Oct 27 New ### [Vulnerability Research Software Engineer](https://jobicy.com/jobs/157395-vulnerability-research-software-engineer.md) About Us Socket helps devs and security teams ship faster by cutting out security busywork. Thousands of orgs use Socket to safely find, audit, and manage open source code. Our… * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Oct 27 New ### [Senior Phishing Tradecraft Researcher](https://jobicy.com/jobs/157339-senior-phishing-tradecraft-researcher.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Oct 27 New ### [Senior Manager, Detection Engineering & Threat Hunting](https://jobicy.com/jobs/157334-senior-manager-detection-engineering-threat-hunting.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![Chainguard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e4b6aacf-221.jpeg) Chainguard Oct 27 New ### [Principal Product Security Researcher](https://jobicy.com/jobs/157330-principal-product-security-researcher-2.md) Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations… * ![Chainguard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e4b6aacf-221.jpeg) Chainguard Oct 27 New ### [Principal Product Security Engineer](https://jobicy.com/jobs/157328-principal-product-security-engineer.md) Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations… * ![OpenAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/03/0523b13262b12c215d8009938f5c14f1.jpeg) OpenAI Oct 27 New ### [Security Engineer, Agent Security](https://jobicy.com/jobs/151775-security-engineer-agent-security.md) About the TeamThe team’s mission is to accelerate the secure evolution of agentic AI systems at OpenAI. To achieve this, the team designs, implements, and continuously refines security policies, frameworks,… * ![OpenAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/03/0523b13262b12c215d8009938f5c14f1.jpeg) OpenAI Oct 27 New ### [Technical Threat Investigator, Threat Intel Engineering](https://jobicy.com/jobs/151752-technical-threat-investigator-threat-intel-engineering.md) About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Threat Intelligence team protects OpenAI’s technology, people, research,… [Browse all jobs](https://jobicy.com/jobs.md)