About the company
0G Labs is a collection of passionate creators, builders and Web3 enthusiasts on a mission to make AI a Public Good. The 0G protocol is the first decentralized AI operating system (deAIOS) – an infinitely scalable infrastructure composed of an L1 modular blockchain, cost-efficient storage, verifiable AI, generative agents, AI DA, and a unified service marketplace. 0G is the only AI chain providing infinite DA scalability. For the first time, creators can develop high-performance AI Dapps as well as next generation on-chain gaming and high-frequency Defi Dapps. 0G is backed by the best investors in Web3, including Bankless, Hack VC, Symbolic Capital, and Samsung Next, as well as leading ecosystem partners such as Polygon, Astar, Conflux, Modulus, Ora, Arbitrum and Layern. 0G boasts some of the world’s smartest innovators, developers and cryptographers in Web3, claiming 10 gold medals at the International Olympiad in Informatics.
Job Summary
What You’ll Accomplish (Responsibilities):
📍1. Holistic Security Strategy & Governance (GRC) 📍Architect the Security Roadmap: Design and execute a 24-month security strategy that aligns with 0G’s roadmap from testnet to mainnet and beyond. 📍Compliance Leadership: Lead the end-to-end preparation and audit process for SOC2 Type II and ISO 27001 certifications. You will define the scope, implement controls, and manage external auditors. 📍AI-Driven Policy Management: Deploy LLM-based tools to continuously analyze internal policies against evolving regulations (EU AI Act, NIST AI RMF) and automate evidence collection, moving 0G from "point-in-time" compliance to "continuous" compliance. 📍2. Operational & Corporate Security (SecOps) 📍Zero-Trust Architecture: Design and enforce Identity and Access Management (IAM) policies. Mandate and manage hardware-based 2FA (YubiKey/FIDO2) for all critical systems (AWS, GitHub, Google Workspace). 📍Endpoint & Remote Security: Secure a fully remote, global workforce. Implement and manage MDM (Mobile Device Management) and EDR (Endpoint Detection & Response) solutions to ensure fleet-wide hygiene without hindering developer velocity. 📍Insider Threat & Data Leakage Prevention: Implement controls to protect intellectual property and sensitive data, utilizing AI to detect anomalous data exfiltration behaviors.
What You Bring (Requirements):
📍The Builder-Defender: 8+ years of information security experience, with at least 3 years in a leadership role (Head of Security, CISO, Director, Team Lead). You have built security functions from scratch (0 to 1). 📍Compliance: Proven track record of leading a technology company through successful SOC2 or ISO 27001 audits. You know how to map controls to technical realities without creating bureaucratic nightmares. 📍Web3 Native: Deep understanding of blockchain fundamentals. You know the difference between a Reentrancy attack and a Sybil attack. You understand the risks of "Blind Signing" and how to mitigate them. 📍AI Pragmatist: You don't just talk about AI; you use it. You can demonstrate experience (or strong conceptual plans) for using LLMs/Agents to automate security workflows (triage, policy review, code analysis). 📍Crisis Commander: Experience leading Incident Response (IR) for high-severity issues. You remain calm under pressure and can coordinate legal, comms, and engineering during a crisis.
The crypto industry is evolving rapidly, offering new opportunities in blockchain, web3, and remote crypto roles — don’t miss your chance to be part of it.
