SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Morpho is a leading decentralized finance (DeFi) lending protocol backed by a16z crypto, Paradigm, Ribbit Capital, and 50+ other investors. The protocol has over $1 billion in deposits and is used by institutional clients including Bitwise, Galaxy, and Anchorage Digital, as well as major crypto exchanges like Coinbase, Binance, and Kraken. Morpho is scaling its team to establish itself as the open credit network for the world.
As Head of Security, you will define and drive Morpho's security strategy across the entire organization—corporate IT, cloud and infrastructure, application, supply chain, identity, incident response, threat intelligence, and counterparty security. You will build and lead the security function from the ground up, hiring across security operations and application security disciplines. This is a hands-on leadership role: you'll personally execute critical security work while scaling the team, and you'll serve as Morpho's credible security voice internally to leadership and externally to integrators, institutions, and ecosystem partners.
Key responsibilities include: owning and evolving the security strategy and roadmap; building and leading the security team; overseeing the IT function; personally executing threat modeling, architecture reviews, control implementation, and incident command; setting a coherent governance and security framework; owning incident response end-to-end including runbooks and market communication; building a counterparty security program for curators and partners; leading certification strategy (SOC 2, ISO 27001); representing Morpho's security posture externally and internally; and partnering cross-functionally with Engineering, Protocol, and Integrations teams.
Success metrics include: within 30 days, building an independent picture of Morpho's posture, threat model, and in-flight work; within 60 days, publishing a prioritized security roadmap, defining team build-out plans, and driving top-severity gaps; within 90 days, demonstrating progress on highest-priority gaps, validating incident-response capability through tabletop exercises, and establishing Morpho's external security posture.
The role is based in Paris with flexibility for remote work within the -5h GMT to +2h GMT timezone band to ensure team overlap.
REQUIREMENTS:
- 10+ years in security, with several years building or leading a security function, ideally at a crypto/web3, fintech, or financial-services company where security is core to the business
- Strong grasp of the crypto/web3 threat model
- Proven experience building and growing a security team from a small base, recruiting across security operations and application/infrastructure security
- Deep, hands-on technical expertise across cloud, infrastructure, CI/CD, supply-chain, identity, and application security
- Owned incident response end-to-end, including incident command and external communication
- Sharp prioritization and ability to galvanize action through hard and soft influence
- Exceptional, organized, responsive communication credible to executives and external audiences
- Humble demeanor
NICE-TO-HAVE:
- Established network and public profile in security or crypto-security community
- Offensive security depth or experience standing up red/blue capabilities
- Familiarity with institutional and regulatory expectations and threat-sharing networks (e.g., Crypto ISAC, TIBER-style frameworks)
- Experience taking an organization through certifications (SOC 2, ISO 27001, or equivalent)
