Product Security Manager

MoonPay is hiring a Product Security Manager to lead its Application Security and Vulnerability Management & Automation teams. The role sets product security strategy, embeds security into the product development lifecycle, and strengthens vulnerability management, incident response, and regulatory compliance.

Responsibilities:

• Lead and Mentor: Oversee the day-to-day operations and career development of the Application Security and Vulnerability Management & Automation teams
• Security Strategy: Define the roadmap for product security, focusing on scalable automation and proactive defense mechanisms
• Vulnerability Management: Drive the end-to-end lifecycle of vulnerability discovery, triaging, and remediation across our entire ecosystem
• Application Security: Improve security tooling (SAST, DAST, SCA) into CI/CD pipelines and lead threat modeling sessions and penetration testing for new features
• Cross-Functional Collaboration: Partner with Engineering and Product leaders and help and influence with security topics new business units and acquisitions to prioritize security debt and promote a culture of Security by Design
• Incident Response: Lead high-priority security incidents and investigations and improve processes, manage team rotas and escalations
• Regulatory and Compliance: Support organisation maintain or acquire new critical certifications such as SOC2, PCI, CIS TOP 18, ISO27001

Requirements:

• You have a proven track record of managing technical security teams in high-growth, cloud-native environments
• As our team moves at a very fast pace, you must be comfortable navigating ambiguity and resolving unclear or evolving topics effectively
• You possess a strong background in application security, penetration testing and software engineering
• You believe that manual processes are bugs and have experience building or implementing automated security scanning and reporting tools
• You can balance immediate tactical needs with long-term security goals
• You are curious about (or experienced in) blockchain technology, smart contract security, and the unique challenges of the Web3 landscape