Cybersecurity

ABOUT THE ROLE

The Cybersecurity, Principal is a senior technical security leader responsible for executing Hut 8’s cybersecurity strategy and turning it into secure architecture, operating capabilities, and measurable control improvements. This role is designed for an experienced security architect and builder who can work across corporate IT, mining operations, data centers, cloud, and AI/compute environments.

The Principal will own major security work streams, design practical solutions, guide implementation, validate controls, and help establish the foundations of Hut 8’s security program. This is not an entry-level engineering role. It requires the technical depth to operate across architecture, identity, cloud, endpoint, network, application, data, and OT environments, together with the judgment to prioritize risk and deliver in a fast-moving organization.

The Principal executes against the strategy set by the Cybersecurity, Partner and works closely with Software, Networking, Data Engineering, Business Intelligence, Applied AI, Technology Operations, and Mining Operations. This role reports into the Technology organization, with a preferred growth path toward broader enterprise security ownership.

What You'll Do

• Translate Hut 8’s cybersecurity strategy, principles, and roadmap into executable technical plans and prioritized workstreams.
• Design and implement defense-in-depth security architecture across identity and access management, networks, endpoints, cloud, SaaS, data, APIs, CI/CD pipelines, and OT or industrial control environments.
• Establish secure architecture patterns, reference designs, technical standards, and security-by-default practices for new systems and major changes.
• Lead implementation of core security capabilities, including SIEM or security monitoring, EDR, vulnerability management, security tooling, identity governance, and incident response processes.
• Improve identity and access controls, including MFA, SSO, privileged access, least privilege, joiner-mover-leaver workflows, access reviews, and service-account governance.
• Build and maintain practical security controls for cloud, SaaS, data, application, and AI/compute environments.
• Partner with engineering and technology teams to secure integrations, APIs, CI/CD pipelines, production platforms, and enterprise data throughout the technology lifecycle.
• Support the design and execution of incident response, including detection, triage, containment, eradication, recovery, root-cause analysis, and post-incident remediation.
• Lead vulnerability management activities, including prioritization, remediation planning, exception handling, validation, and reporting.