About the Role
You will own product security architecture across the platform, making security a core property of the system design rather than an afterthought. You will analyze and secure key management, signing workflows, and transaction pipelines, and conduct system-level threat modeling for new features, protocols, and blockchain integrations. You will design and review security-sensitive components such as authentication, authorization models, and cryptographic workflows, and implement defense-in-depth controls across application, infrastructure, and protocol layers. You will also expand software supply-chain security, manage security and infrastructure configuration as code, and support incident response, root-cause analysis, and ongoing SOC 2 and ISO certification work. You will represent the company in security architecture reviews with banks, auditors, and partners, and share knowledge through research, articles, and conference talks.
Requirements
- 10+ years of experience in security engineering, product security, or security architecture
- Experience securing financial infrastructure or blockchain platforms
- Strong understanding of cryptographic systems, wallet architectures, and key management models
- Familiarity with MPC, threshold signatures, or HSM-backed key management
- Experience performing system-level threat modelling and security architecture reviews
- Solid knowledge of distributed systems, networking protocols, and cloud infrastructure (AWS)
- Experience with software supply-chain security and securing the dev environment end to end
- Experience managing security and infrastructure configuration as code
- Familiarity with maintaining SOC 2, ISO 27001, ISO 22301, and related certifications
- Knowledge of industry security frameworks such as the NIST Cybersecurity Framework
- Strong understanding of authentication systems, authorization models, and applied cryptography
- Experience working with modern backend languages such as TypeScript or Rust
- Clear communication skills to translate complex security risks into practical engineering decisions
Responsibilities
- Lead product security architecture across the platform
- Analyze and secure key management, signing workflows, and transaction pipelines
- Conduct system-level threat modeling for new features, protocols, and blockchain integrations
- Design and review security-sensitive components such as auth systems, authorization models, and cryptographic workflows
- Define and implement defense-in-depth controls across application, infrastructure, and protocol layers
- Own and expand software supply-chain security
- Drive infrastructure and security configuration into version-controlled code in GitHub
- Work with engineering teams to ensure secure design decisions during product development and architectural planning
- Investigate emerging risks across blockchain protocols, custody models, and cryptographic systems
- Support ongoing SOC 2, ISO, and certification work
- Support incident response and root-cause analysis for security-critical events
- Provide day-to-day security support to developers
- Represent DFNS in security architecture reviews with tier-one banks, auditors, and partners
- Contribute to security research and knowledge sharing through articles, talks, or technical publications