The SecOps contributor workstream is responsible for helping the DAO to integrate security into development processes, managing incidents, and collaborating with teams. This role develops response plans, conducts assessments, and ensures effective communication of security practices. Essential skills include technical security assessments, programming, and strong communication abilities, with blockchain and DevOps experience being advantageous.
Key Responsibilities
Security Integration
- Develop secure systems to protect Lido Protocol, DAO, applications, contributors, partners, and stakers.
- Define processes, systems, and applications to make attacks difficult to execute and easy to detect.
- Embed security practices and tools within the development pipeline.
Threats and Incident Management
- Develop and maintain incident response plans and playbooks.
- Perform regular vulnerability assessments and penetration testing.
- Lead or participate in incident response activities, including investigation, containment, eradication, and recovery.
- Monitor security alerts and incidents to identify and respond to threats promptly.
Collaboration and Training
- Collaborate with development and operations teams to ensure security is incorporated from design to deployment and maintenance.
- Provide training and support on security tools and techniques, emphasizing soft skills like communication, negotiation, and influence.
Qualifications & Requirements
Must have
- Experience with technical security assessments, code audits, design reviews, and vulnerability research.
- Proficiency in programming languages (Python, Golang, JavaScript, Bash).
- Experience with security tools and technologies (SIEM, IDS/IPS, vulnerability scanners, automated security testing).
- Excellent communication skills to articulate security concepts to technical and non-technical stakeholders.
- Strong problem-solving abilities for security investigations and risk assessments.
- English level: B2+
Good to have
- Experience with blockchain technologies, Ethereum-based networks, web3 bug hunting, and contract analysis.
- Familiarity with DevOps practices and tools (Docker, Kubernetes, GitHub Actions, Git, Ansible, Terraform).
- Experience with supply chain attacks analysis and prevention.
- Focus on improving real-world security, not compliance.
Key Factors
- Contribute from anywhere in the world.
- Competitive compensation level.
- Flexible schedule.
- Compensation for education, including language & professional growth courses.
- Equipment & co-working reimbursement program.
About Lido
Lido, launched in December 2020 by Konstantin Lomashuk, Vasiliy Shapovalov and Jordan Fish and governed by Lido DAO, operates the leading liquid staking protocol for Ethereum and other networks. Its design lets users stake ETH via curated validators and receive stETH, a liquid token usable across DeFi while accruing validation rewards, preserving decentralization and liquidity. Audited and non-custodial, Lido supports distributed validator technology and dual governance research to limit operator risk. Governed by LDO holders with contributors across Europe and globally remote, Lido serves millions and secures significant staked value across the ecosystem. Backed by DAO treasury and investors including Semantic VC and ParaFi Capital, the protocol emphasizes transparency and security. Expect a governance-driven culture that values open collaboration, rigorous risk analysis and steadily improving decentralized staking infrastructure for the ecosystem.