Role Overview
We are seeking a Senior Security Engineer – Digital Asset Custody to serve as a technical authority for digital asset custody engineering. This hands-on individual contributor will define security architecture and drive critical decisions across key management, HSMs, MPC, custody policies, disaster recovery, and incident response. The ideal candidate brings strong engineering judgment in high-risk environments and can work independently while influencing engineering, cybersecurity, risk, operations, and leadership teams.
Location – Austin/Dallas/ Charlotte
Key Responsibilities
- Design and evolve institutional-grade key management solutions using HSMs, MPC, and secure key generation, storage, rotation, signing, and recovery.
- Define security patterns across hot-wallet, warm-wallet, and cold-storage models.
- Lead the design of custody policy controls covering authorization, approvals, transaction limits, segregation of duties, and exception handling.
- Ensure custody policies and technical controls are deterministic, testable, observable, enforceable, and auditable.
- Develop disaster recovery and incident response strategies for key recovery, quorum loss, infrastructure failures, and blockchain events.
- Lead technical investigations, root-cause analyses, and long-term remediation following security incidents.
- Identify architectural and operational risks and recommend mitigation strategies with clear trade-offs.
- Ensure custody platforms scale across digital assets, blockchain networks, and tokenized products without weakening their security posture.
- Use generative and agentic AI tools to support threat modeling, architecture, documentation, testing, and security reviews.
Qualifications
- 10+ years of software or security engineering experience, with expertise in cryptographic or security-sensitive systems.
- Hands-on experience with HSMs, MPC frameworks, and secure key management systems.
- Experience with digital asset custody, wallets, blockchain infrastructure, or related platforms.
- Experience with Web3 security tools such as Slither, Mythril, and Foundry fuzzing.
- Proficiency in C, C++, Rust, Go, or another language used to develop security-critical systems.
- Strong understanding of cryptography, distributed systems, fault-tolerant architecture, and defense-in-depth principles.
- Experience developing incident response plans, disaster recovery strategies, and security runbooks.
- Experience working with independent security auditors such as Trail of Bits, Halborn, or similar firms.
- Ability to communicate security risks and architectural trade-offs clearly to technical and non-technical stakeholders.
- Proven ability to provide technical leadership and influence cross-functional teams without formal people-management responsibility.
- Experience applying generative AI or agentic AI tools to complex engineering and security workflows is beneficial.