Senior Security Engineer, Digital Asset Custody

Job Description

We are hiring a Senior Security Engineer, Digital Asset Custody to serve as the technical authority for Crypto Custody engineering, with deep ownership of key management, custody security architecture, and risk posture across the client's digital asset platforms. This is a hands-on, high-impact individual contributor role. This engineer will set technical direction, define custody architecture, and own critical design decisions across HSMs, MPC, key storage, policy enforcement, disaster recovery, and incident response.

The ideal candidate will have strong engineering judgment in high-risk, high-trust environments and the ability to operate independently while influencing engineering teams, architects, security partners, and senior leadership.

Responsibilities

Custody Key Management & Cryptographic Architecture:

• Design, implement, and evolve institutional-grade key management architectures, including:
• Hardware Security Modules (HSMs)
• Multi-Party Computation (MPC)
• Secure key generation, storage, rotation, signing, and recovery
• Define architecture patterns and trade-offs across hot wallet, warm wallet, and cold storage models.
• Ensure cryptographic solutions align with regulatory, security, and audit requirements.
• Partner closely with Cybersecurity and Risk teams to incorporate defense-in-depth and zero-trust principles into custody designs.

Custody Policy Engine & Governance: Lead the design and development of the Custody Policy Engine, including:

• Authorization, approvals, limits, and segregation of duties
• Transaction controls and exception handling
• Policy versioning, auditability, and enforcement

Additional responsibilities:

• Ensure policies are code-driven, deterministic, observable, and testable.
• Translate business, legal, and risk requirements into enforceable technical controls.
• Serve as a trusted technical advisor on custody governance and policy topics.

Disaster Recovery, Resilience & Incident Management

• Own custody-specific disaster recovery strategies, including key recovery, quorum loss scenarios, and blockchain-related events.
• Create and maintain incident response playbooks and recovery runbooks.
• Partner with Operations, Security, and SRE teams to validate and test recovery procedures.
• Lead post-incident reviews, root cause analyses, and long-term remediation efforts.

Custody Architecture & Risk Management

• Serve as the primary custody architecture authority across wallets, blockchains, environments, and platforms.
• Identify architectural and operational risks and propose mitigation strategies with clear trade-off analysis.
• Ensure custody solutions scale across multiple assets, chains, and future tokenized products.
• Influence enterprise security standards by elevating security, resilience, and engineering rigor.

AI-Augmented Engineering Excellence Leverage GenAI and agentic AI tools to accelerate:

• Architecture design
• Threat modeling
• Documentation
• Testing and reviews
• Set expectations for AI-assisted engineering that prioritizes correctness, security, and quality.
• Partner with engineering teams to improve architecture, code quality, and documentation across custody platforms.

Skills and Requirements

• 10+ years of software engineering experience with a strong focus on security-sensitive or cryptographic systems.
• Hands-on experience with HSMs, MPC frameworks, and secure key management systems.
• Experience with Web3 security tools such as Slither, Mythril, and Foundry Fuzzing.
• Experience with cryptography-focused development languages including C, C++, Rust, or Go.
• Experience working with third-party security auditors such as Trail of Bits, Halborn, or similar firms.
• Proven ability to design systems where failure carries significant business or security risk.
• Strong background in distributed systems, secure architectures, and fault-tolerant design.
• Demonstrated success serving as a technical authority without direct people management responsibilities.
• Experience with crypto custody platforms, digital asset infrastructure, or blockchain ecosystems.
• Ownership of incident response programs, disaster recovery design, or security runbooks.
• Ability to clearly communicate risk-based trade-offs to both technical and non-technical stakeholders.
• Strong systems-thinking mindset that connects technology, security, governance, and operations.
• Comfortable challenging assumptions and proactively identifying risks in high-stakes environments.
• Experience using AI tools to improve complex engineering workflows.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].