ABOUT THE ROLE
The Cybersecurity, Principal is a senior technical security leader responsible for executing Hut 8’s cybersecurity strategy and turning it into secure architecture, operating capabilities, and measurable control improvements. This role is designed for an experienced security architect and builder who can work across corporate IT, mining operations, data centers, cloud, and AI/compute environments.
The Principal will own major security work streams, design practical solutions, guide implementation, validate controls, and help establish the foundations of Hut 8’s security program. This is not an entry-level engineering role. It requires the technical depth to operate across architecture, identity, cloud, endpoint, network, application, data, and OT environments, together with the judgment to prioritize risk and deliver in a fast-moving organization.
The Principal executes against the strategy set by the Cybersecurity, Partner and works closely with Software, Networking, Data Engineering, Business Intelligence, Applied AI, Technology Operations, and Mining Operations. This role reports into the Technology organization, with a preferred growth path toward broader enterprise security ownership.
What You'll Do
- Translate Hut 8’s cybersecurity strategy, principles, and roadmap into executable technical plans and prioritized workstreams.
- Design and implement defense-in-depth security architecture across identity and access management, networks, endpoints, cloud, SaaS, data, APIs, CI/CD pipelines, and OT or industrial control environments.
- Establish secure architecture patterns, reference designs, technical standards, and security-by-default practices for new systems and major changes.
- Lead implementation of core security capabilities, including SIEM or security monitoring, EDR, vulnerability management, security tooling, identity governance, and incident response processes.
- Improve identity and access controls, including MFA, SSO, privileged access, least privilege, joiner-mover-leaver workflows, access reviews, and service-account governance.
- Build and maintain practical security controls for cloud, SaaS, data, application, and AI/compute environments.
- Partner with engineering and technology teams to secure integrations, APIs, CI/CD pipelines, production platforms, and enterprise data throughout the technology lifecycle.
- Support the design and execution of incident response, including detection, triage, containment, eradication, recovery, root-cause analysis, and post-incident remediation.
- Lead vulnerability management activities, including prioritization, remediation planning, exception handling, validation, and reporting.
- Contribute to the security governance, risk, and compliance program by documenting controls, gathering evidence, testing effectiveness, and closing audit findings.
- Support security assessments, third-party reviews, risk analyses, architecture reviews, and control-validation exercises.
- Develop technical runbooks, operating procedures, diagrams, standards, and decision records that make the security program repeatable and scalable.
- Work with external security partners and vendors to drive delivery, validate outcomes, and progressively build internal capability.
- Provide clear technical advice, risk-based recommendations, and status reporting to the Cybersecurity, Partner and technology leadership.
- Mentor engineers and technical stakeholders on secure design, operational discipline, and incident readiness.
ABOUT YOU
- 5+ years of progressive cybersecurity or information security experience, with substantial experience in security architecture, engineering, operations, or a comparable technical leadership role.
- Bachelor’s degree in Computer Science, Information Security, or a related field; security certifications such as CISSP, CISM, CCSP, GIAC, or relevant cloud security certifications are preferred.
- Strong hands-on knowledge of security architecture, cloud and SaaS security, identity and access management, network security, endpoint security, application security, data security, and OT or industrial control environments.
- Experience designing and delivering security capabilities such as SIEM or SOC, EDR, vulnerability management, incident response, IAM, privileged access, and security monitoring.
- Experience securing platform integrations, APIs, CI/CD pipelines, cloud and data architectures, and production systems.
- Working knowledge of security frameworks and control environments, including NIST CSF, ISO 27001, SOC 2, SOX ITGC, PCI, or comparable standards.
- Demonstrated ability to take ambiguous requirements, identify the material risks, design a practical solution, and drive the work through implementation and validation.
- Strong technical writing and communication skills, with the ability to explain security decisions to engineers, operators, executives, and non-technical stakeholders.
- Experience working with security vendors, MSSPs, auditors, and third parties; ability to hold partners accountable for measurable outcomes.
- Comfortable operating as a senior individual contributor and technical leader who can lead through influence, coordinate cross-functional delivery, and mentor others.
- Pragmatic, collaborative, and willing to work hands-on to establish the foundational capabilities required for a maturing security program.
ABOUT THE WORK ENVIRONMENT
This role is in office at our corporate headquarters in the Brickell area of Miami, Florida. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.