Security Guy / Head of Security

The role

Duel holds player funds in crypto, publishes verifiable randomness, and advertises itself as a target by picking fights with scammers. Security is not a compliance checkbox here, it’s an existential requirement.

You own all of it: application security, infrastructure, custody, fraud, incident response, and the security bar the rest of engineering builds to.

There is no security team. You are it, until you build one.

What you’ll do

• Own the security posture across product, infrastructure, and wallet custody
• Design and enforce key management: multi-sig, cold storage, signing policy, recovery
• Threat-model the provably fair pipeline and everything that touches settlement
• Run and respond to incidents; own the postmortem culture
• Build fraud, collusion, and bonus-abuse detection with data and casino ops
• Set secure defaults in the SDLC — reviews, secrets handling, dependency policy
• Run external pentests and a disclosure programme, and actually fix what comes back
• Hire the security team as scale demands it

What you’ll need

• Senior security experience covering application, infrastructure, and operational security
• Real crypto custody experience — key management, multi-sig, hot/cold separation, signing policy
• You have run incident response for something that mattered, not just written the runbook
• Strong on the offensive side: you can find the hole before you write the policy about it
• Understanding of provably fair systems and where their guarantees actually break
• Fraud, bonus abuse, and collusion patterns in gambling are familiar territory
• Comfortable building the function from zero and being the whole team at first

Come defend the thing everyone wants to break.