giga chad
About us
ooor is an independent creative studio working across digital products, brands, and interactive experiences.
We work with ambitious teams to turn complex ideas into clear, distinctive things — combining design, technology, and experimentation. Our team is small, collaborative, and intentionally low on bureaucracy. We care about strong ideas, sharp execution, and giving people enough ownership to do their best work.
As we grow, we’re looking for a Security Senior to help make sure our products, infrastructure, and internal systems stay secure without slowing the team down.
Role
As a Security Senior at ooor, you’ll own and evolve security practices across the studio.
You’ll work closely with engineering and product teams, reviewing architecture, identifying risks, improving processes, and helping us make sensible security decisions from the start rather than fixing problems later.
This is a hands-on role for someone comfortable moving between strategy and implementation — from defining standards to investigating a suspicious dependency or reviewing a new product flow.
Responsibilities
- Own and continuously improve security practices across ooor
- Review application and infrastructure architecture for potential vulnerabilities
- Perform security assessments, threat modeling, and risk analysis
- Review authentication, authorization, data handling, and access-control implementations
- Identify vulnerabilities and work with engineers on practical remediation
- Improve secrets, credentials, permissions, and key-management practices
- Establish lightweight security guidelines that fit a fast-moving creative environment
- Evaluate third-party services, dependencies, APIs, and integrations
- Support incident investigation and response when needed
- Help the team build security awareness into everyday product and engineering decisions
Requirements
- Strong experience in application, infrastructure, or product security
- Solid understanding of modern web security and common attack vectors
- Experience securing cloud-based applications and infrastructure
- Strong knowledge of authentication, authorization, encryption, and access-control patterns
- Experience with vulnerability assessment, threat modeling, and security reviews
- Ability to read and understand application code and technical architecture
- Comfortable working independently and taking ownership of security decisions
- Ability to explain security risks clearly to both technical and non-technical teammates
- Pragmatic mindset — you know how to balance security, usability, and speed
Nice to have
- Experience with Web3, wallets, smart contracts, or blockchain infrastructure
- Experience working with small product teams, startups, or creative studios
- Familiarity with penetration testing and security automation
- Experience with CI/CD and supply-chain security
- Knowledge of AWS, GCP, Cloudflare, or similar infrastructure
- Experience building security practices from an early stage rather than maintaining an established security organization
- Curiosity beyond security — design, technology, creative tooling, or experimental products are all welcome