Chief Security Officer (CSO)

Founding Chief Security Officer (CSO)

Cybersecurity | OSINT | Threat Intelligence | AI Security | Digital Sovereignty

Company: EVONAIRE INC.

Location: Remote, United States Only

Position: Founding Executive Leadership

Commitment: Part-Time, 20 Hours Per Week

Schedule: Monday–Thursday | Flexible

Company Stage: Early-Stage | Pre-Revenue

Compensation: Equity Opportunity + Cash Compensation Subject to Funding

Reports To: Founder, Chief Executive Officer

About EVONAIRE INC.

Established May 30, 2025, EVONAIRE INC. is a Delaware-incorporated technology company developing ethical digital infrastructure centered on human autonomy, consent, cybersecurity, cognitive liberty, and intellectual property protection.

Our technology ecosystem includes GAIA AI™, MirrorShield™, ClaimChain™, UPstream™, and proprietary privacy and security frameworks.

We are building infrastructure that prioritizes human rights, technological accountability, individual sovereignty, and protection against unauthorized surveillance and digital exploitation.

Security is foundational to our architecture.

About the Position

EVONAIRE INC. is seeking an experienced Founding Chief Security Officer (CSO) to establish and lead our cybersecurity, intelligence, and enterprise protection strategy.

This executive position combines traditional cybersecurity leadership with advanced Open-Source Intelligence (OSINT), cyber threat intelligence, security architecture, AI security, and digital asset protection.

The ideal candidate possesses both strategic leadership capabilities and hands-on experience investigating security threats, protecting proprietary technologies, and developing resilient security infrastructure.

The CSO will collaborate directly with the CEO, Engineering, AI/ML, Legal, and Trust Safety leadership.

Key Responsibilities

1. Open-Source Intelligence (OSINT) Digital Investigations

• Establish and lead EVONAIRE’s OSINT and cyber threat intelligence operations.

• Conduct lawful, targeted investigations using publicly available information and appropriately licensed intelligence sources.

• Monitor publicly accessible cybersecurity intelligence sources for emerging vulnerabilities, exposed infrastructure, and relevant threat activity.

• Investigate suspected impersonation, fraudulent websites, counterfeit technologies, and unauthorized representations of EVONAIRE.

• Monitor domain registrations, lookalike domains, and phishing infrastructure targeting company-controlled assets.

• Identify publicly exposed company credentials, intellectual property, or sensitive information through authorized intelligence services.

• Monitor public code repositories for accidental exposure of proprietary information.

• Conduct company-focused threat landscape assessments.

• Research relevant cybercriminal tactics, infrastructure trends, and emerging attack patterns.

• Produce structured intelligence reports with evidence, confidence levels, and recommended defensive actions.

• Maintain documented standards distinguishing verified findings, analytical assessments, and unsubstantiated allegations.

2. Dark-Web Threat Intelligence

• Establish lawful dark-web intelligence monitoring through authorized platforms, vendors, and publicly available research.

• Identify credible indicators of leaked corporate credentials or confidential company information.

• Investigate reports of counterfeit EVONAIRE products, unauthorized licensing, and fraudulent technology offerings.

• Monitor available threat intelligence concerning ransomware, credential theft, and data exposure.

• Evaluate reported security threats without assuming that unverified claims indicate actual compromise.

• Coordinate defensive remediation and appropriate legal escalation.

All investigations must comply with applicable law, privacy requirements, and EVONAIRE’s non-surveillance principles.

3. Cybersecurity Architecture Defense

• Establish enterprise-wide cybersecurity standards.

• Develop and implement Zero Trust architecture.

• Oversee endpoint, cloud, network, application, and API security.

• Implement identity and access management and least-privilege permissions.

• Establish continuous vulnerability management and security testing.

• Develop incident detection, containment, and recovery protocols.

• Oversee encryption, key management, credential protection, and security logging.

• Implement secure development and software supply chain protections.

• Coordinate authorized penetration testing and independent security assessments.

4. AI Security & Emerging Technology Protection

• Establish security requirements for GAIA AI and EVONAIRE’s AI infrastructure.

• Protect proprietary AI models, datasets, training environments, and deployment systems.

• Mitigate prompt injection, model extraction, data poisoning, unauthorized model access, and other AI-specific security risks.

• Implement model access controls, provenance requirements, and secure deployment procedures.

• Support the development of privacy-preserving AI security technologies.

• Develop security assessment requirements for future research and emerging technologies.

5. MirrorShield™ Security Infrastructure

• Oversee security engineering requirements supporting MirrorShield.

• Establish default-deny access protections and defensive containment procedures.

• Implement tamper detection, secure access revocation, and anti-residual-access protections.

• Support automated security updates, anti-rollback controls, and defensive threat isolation.

• Coordinate secure incident documentation and ClaimChain-compatible evidence preservation.

• Ensure protective measures remain non-retaliatory, proportionate, and technically verifiable.

6. Executive Corporate Security Intelligence

• Conduct risk-based assessments of credible digital threats affecting company operations and authorized executive communications.

• Establish safeguards against executive impersonation, phishing, account takeover, and business email compromise.

• Monitor verified attempts to impersonate EVONAIRE executives or misuse company identities.

• Support secure executive communication protocols and confidential information handling.

• Coordinate incident escalation and lawful protective measures when credible threats are identified.

Intelligence operations must not involve personal surveillance, harassment, discriminatory profiling, or investigations unrelated to legitimate company security interests.

7. Intellectual Property Anti-Counterfeiting

• Develop intelligence-led strategies for identifying unauthorized commercial use of EVONAIRE intellectual property.

• Monitor public sources for counterfeit products, fraudulent licensing claims, and brand impersonation.

• Establish evidence preservation procedures for potential intellectual property violations.

• Collaborate with Legal on appropriate takedown requests, contractual enforcement, and referrals.

• Establish security protections for proprietary research, software, architecture, and documentation.

• Support secure watermarking, code signing, provenance verification, and anti-tampering measures.

8. Incident Response, Digital Forensics & Accountability

• Build and maintain the company’s incident response framework.

• Establish evidence handling, chain-of-custody, and forensic documentation procedures.

• Investigate verified cybersecurity incidents affecting company-controlled systems.

• Correlate authorized security telemetry with independently obtained threat intelligence.

• Produce incident reports and executive security briefings.

• Coordinate remediation with engineering teams and external security specialists.

• Support legally appropriate reporting to relevant authorities when necessary.

• Conduct post-incident reviews and improve defensive controls.

9. Threat Intelligence Automation

• Evaluate security information and event management (SIEM) technologies.

• Develop intelligence collection and correlation workflows using approved tools.

• Implement appropriate security orchestration and automated response capabilities.

• Integrate vulnerability advisories and trusted threat intelligence feeds into defensive workflows.

• Establish alert prioritization, false-positive management, and verification procedures.

• Develop dashboards tracking security posture, incidents, exposure remediation, and emerging vulnerabilities.

• Ensure automation does not make punitive decisions based solely on unverified intelligence.

10. Governance, Privacy Security Ethics

• Establish security policies aligned with NIST, applicable privacy regulations, and relevant industry standards.

• Ensure intelligence collection follows data minimization and purpose limitation requirements.

• Implement role-based authorization for OSINT investigations.

• Maintain audit trails for intelligence access, investigative decisions, and security enforcement actions.

• Protect individual privacy, freedom of expression, and cognitive autonomy.

• Establish security review and accountability processes across company technologies.

• Ensure sensitive investigative findings receive appropriate Legal and executive oversight.

Required Qualifications

• Significant professional experience in cybersecurity, information security, or security engineering.

• Demonstrated OSINT or cyber threat intelligence experience.

• Experience with technical security investigations and incident response.

• Strong understanding of cloud, application, network, and infrastructure security.

• Knowledge of Zero Trust, encryption, IAM, and vulnerability management.

• Familiarity with security intelligence frameworks such as MITRE ATT&CK.

• Experience evaluating indicators of compromise and analyzing emerging cyber threats.

• Understanding of lawful intelligence gathering, privacy, and evidence handling.

• Ability to build security programs within early-stage technology environments.

• Strong analytical communication and executive reporting skills.

Preferred Qualifications

• Previous leadership experience as a CSO, CISO, Head of Security, or Director of Security.

• Experience with AI/ML security.

• Advanced OSINT investigation experience.

• Familiarity with dark-web intelligence platforms and commercial threat intelligence services.

• Experience with SIEM, SOAR, and endpoint detection and response systems.

• Digital forensics or incident response background.

• Experience investigating brand impersonation, phishing campaigns, and exposed credentials.

• Familiarity with privacy-enhancing technologies and intellectual property protection.

• Relevant certifications such as CISSP, CISM, GIAC, or equivalent demonstrated experience.

Initial Priorities

During the initial engagement, the CSO will focus on:

1. Assessing EVONAIRE’s existing security architecture and identifying priority risks.
2. Establishing essential company-wide security controls and incident response procedures.
3. Creating a lawful OSINT and threat intelligence program.
4. Establishing brand, domain, repository, and credential exposure monitoring.
5. Developing an initial threat intelligence and security reporting dashboard.
6. Creating the security roadmap for GAIA AI, MirrorShield, ClaimChain, and related proprietary infrastructure.

Our Security Principles

Security Without Surveillance

Intelligence Without Profiling

Defense Without Retaliation

Technology Without Coercion

Accountability Without Exploitation

EVONAIRE believes advanced security must protect human autonomy rather than compromise it.

Compensation & Engagement

EVONAIRE INC. is an early-stage, pre-revenue company.

The position includes consideration for executive equity, subject to corporate approval, written agreements, and vesting requirements.

Cash compensation will depend on available funding and mutually agreed contractual terms.

The role is structured around 20 flexible hours per week, Monday through Thursday.

Final engagement classification will be determined in accordance with applicable law.

How to Apply

Please submit your application through Wellfound.

We encourage candidates to provide a resume and a brief overview of previous cybersecurity leadership, OSINT investigations, threat intelligence operations, or security architectures they have developed.

Candidates with experience combining cybersecurity leadership, ethical intelligence gathering, and AI security are especially encouraged to apply.

EVONAIRE INC. San Francisco, California [email protected]

Protecting human autonomy through ethical technology.