Product Security Manager

About the role

MoonPay is seeking a Product Security Manager to embed security throughout its product development lifecycle. You will lead two high‑impact teams, drive automation, and ensure the platform remains the most trusted brand in the Web3 space.

Key responsibilities

• Lead and mentor the Application Security and Vulnerability Management & Automation teams.
• Define and execute a product security roadmap focused on scalable automation and proactive defense.
• Drive end‑to‑end vulnerability discovery, triage, and remediation across the ecosystem.
• Integrate security tooling (SAST, DAST, SCA) into CI/CD pipelines and lead threat‑modeling and penetration‑testing sessions for new features.
• Partner with engineering and product leaders to prioritize security debt and promote Security by Design.
• Lead high‑priority security incidents, manage team rotas and escalations.
• Support acquisition and maintenance of certifications such as SOC 2, PCI, CIS TOP 18, ISO 27001.

Required profile

• Proven experience managing technical security teams in high‑growth, cloud‑native environments.
• Comfort navigating ambiguity and delivering results at a fast pace.
• Strong background in application security, penetration testing, and software engineering.
• Automation mindset with experience building automated security scanning and reporting tools.
• Strategic thinker balancing immediate tactical needs with long‑term security goals.
• Interest or experience in Web3, blockchain, and smart‑contract security.

Required skills

• Application security tools (SAST, DAST, SCA).
• Vulnerability management processes and automation.
• Penetration testing and threat modeling.
• CI/CD pipeline integration.
• Cloud security in scalable environments.
• Regulatory compliance (SOC 2, PCI, ISO 27001, CIS TOP 18).