Fractional Head of Security & Web3 Operations (Advisory / Retainer)

Date Listed

11 Oct 2026

Experience Level

Experienced / Senior Executive

Profession

IT / Information Technology

Industry

Finance

Job Period

Flexible Start - Flexible End

Location Name

Singapore

Company Profile

Financial Media Group is a below the line digital marketing and investor relations agency that works with a combination of public and private clients all around the world. Predominantly in the B2B / Investor space.

It operates as part of a business ecosystem including capital raising communities, board room services, Mergers & Acquisitions boutique and Investment Banking services.

Job Description

Overview

We are an established boutique investment firm running a live, yield-bearing USDC protocol on the Base network. We need a technically sharp, Singapore-based Web3 engineer or security specialist to serve as our fractional technical advisor.

Your mandate is straightforward: act as the pragmatic technical bridge between leadership and external smart contract developers, while setting up and enforcing institutional-grade operational security.

This is not a full-time build role. It is an advisory and governance post suited for a mid-to-senior blockchain developer, auditor, or security engineer who wants high-level exposure and a consistent monthly retainer alongside their primary commitments.

Key Responsibilities

-

Developer Oversight & Technical Translation: Review PRs, technical specs, and milestone deliverables from external dev teams. Translate technical trade-offs into plain English for commercial leadership before sign-off.

-

Key Management & Wallet Architecture: Implement, document, and maintain strict multi-signature policies (Safe) across hardware wallets, backup recovery protocols, and operational signing ceremonies.

-

Operational Security (OpSec): Audit and tighten end-to-end access controls for deployment pipelines, domain registrar DNS, RPC nodes, and cloud infrastructure.

-

Deployment & Verification Safeguards: Verify smart contract deployments, contract upgrades, parameter adjustments, and verify BaseScan code before transaction execution.

-

Incident Response & Audit Triage: Coordinate with external smart contract auditors, triage reported vulnerabilities, and maintain a lightweight emergency pause/recovery playbook.

What We Are Looking For

-

Local Presence: Based in Singapore, available for occasional in-person working sessions over coffee.

-

Hands-on EVM Competence: Direct experience interacting with EVM contracts, Base/Optimism L2s, and DeFi primitives (ERC-20, vaults, liquidity pools). You understand Solidity code well enough to catch logic flaws or integration bugs.

-

OpSec Pragmatism: Deep familiarity with institutional custody setups (Safe multi-sig, Ledger/Trezor, air-gapped signing, revoke permissions, RPC manipulation defenses). You focus on practical, rock-solid security rather than theoretical bureaucracy. You will remain up to speed on new threat vectors.

-

Clear Communication: Ability to cut through developer jargon, assess risk clearly, and explain the commercial impact of technical decisions.

-

Experience Level: 3 to 6 years in software engineering with at least 2 years focused on Web3/smart contract security. You do not need to be an ex-enterprise CSO, but you must know how production DeFi fails and how to safeguard capital.

Compensation & Engagement

-

Monthly advisory retainer based on an estimated 10 to 15 hours/month, with ad-hoc project bonuses for audit reviews or contract deployment sprints.