Shape the Future of Blockchain—Bringing Business On-Chain

We’re offering a unique opportunity to join Launch Legends (and Autheo) as a part-time Equity Cofounder. Founded in July 2021, Launch Legends is at the forefront of bridging Web3 blockchain technology with the next evolution of Web2 integration—bringing businesses on-chain through enterprise-grade solutions, DePIN innovations, and decentralized financial infrastructure.

Our flagship project, Autheo, is an AI-enabled Layer-0 Operating System with an integrated Layer-1 blockchain and complete decentralized infrastructure that includes decentralized compute, storage, identity, and service marketplaces, as well as a full-stack development environment (DevHub)—engineered for scalable enterprise adoption, developer innovation, and real-world blockchain integration.

Our Projects

• Autheo
• Docs
• Autheo Team
• Launch Legends (Parent Company)
• X / Twitter

About Autheo

With nearly 100 equity cofounders from leading companies and institutions—many with advanced degrees and PhDs—Autheo is solving the critical challenges blocking business adoption of blockchain technology.

Autheo’s Layer-1 network, staking and fee model, and DevHub builder environment are being built and strengthened, alongside sovereign identity (TheoID), decentralized compute and persistent storage through the Autheo Marketplace, AI inference (THEO AI), and post-quantum cryptography.

Key Features

• Layer-0 OS + Layer-1 — Sovereign Cosmos-based coordination layer with an EVM-compatible execution environment, IBC interoperability, and Proof of Autheo consensus.
• Eigensphere Engine — Multi-language runtime. Rust is a first-class path for execution, cryptography, and developer tooling, alongside Go, Solidity, Move, Vyper, and C.
• DevHub & full-stack SDKs — One workspace for frontend, backend, smart contracts, and orchestration.
• TheoID — Sovereign identity for people, services, and AI agents, with a post-quantum roadmap (NIST-standardized ML-KEM, ML-DSA, and SLH-DSA).
• Autheo Marketplace — Decentralized compute, storage, and service markets built into the Autheo network.
• THEO AI — Inference and agent orchestration as a native primitive, not a third-party bolt-on.
• DePIN infrastructure — On-chain networks for real-world infrastructure ownership and resource sharing.

Audits & Organization

Audits: Halborn (testnet and validator node platform), CertiK (Layer-1 chain and smart contracts), Adevar Labs (Base to Autheo bridge).

Token: THEO, the native utility coin of the Autheo network.

Organization: Launch Legends Inc., a Wyoming corporation, parent of Autheo LLC. Stewarded in part by the Autheo Foundation. 100+ equity cofounders across 25+ countries.

Compensation & Growth Path

This is a part-time equity / token-based cofounder opportunity. You will receive equity in Launch Legends, Autheo, and the WFO Creator Network, along with token allocations in the Autheo blockchain. We have already completed an initial financing round to support infrastructure and marketing, and are currently in discussions with VCs and crypto investors to fund expansion. There is no cash salary for this role, and the commitment is at least 20 hours per week.

About the Role

This role reports to the Managing Directors.

Autheo is recruiting a Chief Information Security Officer from the crypto and blockchain security world. You will own security for the Layer-0 Operating System and the integrated Layer-1: keys and signing, the Cosmos-EVM chain, validators and nodes, the Hyperlane-based Autheo Bridge, smart contracts, TheoID, and the security program around them.

Third-party audits are already in place: Halborn on the testnet and validator node platform, CertiK on the Layer-1 chain and smart contracts, and Adevar Labs on the Autheo Bridge. Those audits only matter if findings have owners and retests. We want someone who has secured real Web3 systems—a protocol, wallet, bridge, custody platform, or validator infrastructure—and has the leadership to run the whole program. This is not a seat for a policy-only or compliance-only CISO, and not for a lone tester without the leadership to match.

Part-time does not mean advisory. Equity cofounder means you own the security program, make the hard calls, and work next to protocol, SRE, and contract engineering rather than above them.

Responsibilities

1. Crypto security: keys, custody and signing
2. Own key management end to end: generation, storage, rotation, recovery, and revocation for validator, bridge, deployer, admin, and service keys.
3. Set the custody and signing architecture: HSMs, MPC or threshold signing, multisig, and hardware-wallet policy, with clear quorum and approval rules.
4. Secure wallet and transaction-signing flows for users and developers, including key derivation, signing prompts, and wallet integrations.
5. Drive the TheoID post-quantum roadmap using NIST ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205), with a crypto-agile migration path for people, services, and AI agents.

2. Blockchain security: chain, validators, bridges and contracts
3. Harden validators, nodes, RPC, and consensus-adjacent operations, working with protocol engineering and Site Reliability.
4. Own security for the Autheo Bridge: Hyperlane-based warp routes (including node-license and wrapped-asset contracts), interchain security module and relayer configuration, and the bridge frontend at hyper.autheo.com.
5. Review smart contracts before they ship and whenever they change: upgradeable (UUPS) patterns, access control, admin keys, and pause and upgrade powers.
6. Lead incident response for on-chain events: monitoring and alerting, pause and upgrade runbooks, exploit containment, on-chain forensics, coordination with validators and partners, and a public post-mortem.

3. Web3 security program, audits and bug bounty
4. Run the third-party audit program (Halborn, CertiK, Adevar Labs, and the next firm a new surface needs): scope, findings triage, remediation owners, and retest.
5. Stand up and run a responsible-disclosure and bug-bounty program scoped to what is actually deployed, with clear severity and reward rules.
6. Build internal review: threat models, a secure development lifecycle for Rust, Go, and Solidity, dependency and supply-chain controls, and pre-deployment checklists.
7. Work with the VP of AI Security on THEO AI inference and agent endpoints, and on the compute and storage surfaces of the Autheo Marketplace.

4. Risk, compliance and the security team
5. Cover cloud, DevOps, CI/CD, and access management for the team that ships the chain.
6. Partner with the Chief Risk Officer, the Chief Governance & Controls Officer, and Legal / Privacy counsel on SOC 2 and related frameworks such as ISO 27001, GDPR, and CCPA, without letting compliance stand in for protocol security.
7. Lead and grow the security team, and report risk clearly to the Managing Directors so trade-offs are explicit.

Required

• Hands-on Web3 or blockchain security experience: you have secured a protocol, L1 or L2, bridge, DeFi application, wallet, or custody platform in production. Name the system and your part in it.
• Crypto security depth: key management, HSM, MPC or threshold signing, custody, and wallet or transaction-signing security.
• Blockchain infrastructure security: validator or node operations, consensus-adjacent risk, bridges, or cross-chain messaging.
• Smart-contract security: you have scoped audits with Web3 auditors (for example Halborn, CertiK, or Adevar Labs) and driven findings to remediation and retest.
• On-chain incident response you have led: an exploit, key compromise, bridge or validator incident, or a serious near-miss, with a timeline, decisions, and what changed afterward.
• 10+ years in information security, including 3+ years as CISO, VP of Security, Head of Security, or an equivalent leadership seat: you set priorities, owned incidents, and led people—not only advised.
• Comfortable working directly with protocol engineers, SRE, and contract developers.

Preferred

• Post-quantum migration work involving ML-KEM, ML-DSA, or SLH-DSA, or applied cryptography such as threshold signatures, zero-knowledge proofs, or formal verification.
• Cosmos SDK, CometBFT, IBC, EVM, or Hyperlane experience.
• A bug-bounty or disclosure program you ran, and a public artifact we can read (audit response, post-mortem, threat model, CVE, or talk). Speaking is welcome; it is not required.
• AI endpoint security in production.
• Standing up or operating SOC 2 or ISO 27001; CISSP, CISM, or CIPP. These are a plus, not a substitute for Web3 security experience.
• Prior founder or equity-compensated leadership experience.

First 90 Days

• A key and custody inventory: every key that matters (validator, bridge, deployer, admin, service), who holds it, how it is stored, and how it is rotated or recovered.
• A written map of Autheo’s security surface (keys, chain, validators, bridge, contracts, TheoID, cloud, and AI): what’s deployed, what’s been audited, and what’s risky, with a stop / continue / start list.
• An audit-findings backlog for the Halborn, CertiK, and Adevar Labs work: severity, owner, status, and what still needs a retest.
• An on-chain incident-response runbook covering exploit, bridge, validator, and key-compromise scenarios, one tabletop against a realistic case, and the first disclosure / bug-bounty scope.

About Our Organization

Autheo is building a Layer-0 Operating System and an integrated Layer-1 so identity, compute, storage, developer tooling, and AI sit on one network instead of a pile of bridges. The work now is product and protocol: making that network faster, safer, and ready for the builders and businesses that will run on it.

🌐 🚀 WHY JOIN LAUNCH LEGENDS?

• Build the core, not a side project. Protocol, DevHub, TheoID, and the Marketplace are being built and strengthened now, and your work goes straight into them.
• The CISO seat owns crypto, blockchain, and Web3 security end to end: keys, chain, bridges, contracts, identity, and the team that protects them.
• Equity in Launch Legends and Autheo, plus a THEO token allocation.
• 100+ equity cofounders across 25+ countries. Remote. Direct line to the engineering leads and the Managing Directors.