Principal Security Engineer

Skills

About the Role

You will own product security architecture across the platform, making security a core property of the system design rather than an afterthought. You will analyze and secure key management, signing workflows, and transaction pipelines, and conduct system-level threat modeling for new features, protocols, and blockchain integrations. You will design and review security-sensitive components such as authentication, authorization models, and cryptographic workflows, and implement defense-in-depth controls across application, infrastructure, and protocol layers. You will also expand software supply-chain security, manage security and infrastructure configuration as code, and support incident response, root-cause analysis, and ongoing SOC 2 and ISO certification work. You will represent the company in security architecture reviews with banks, auditors, and partners, and share knowledge through research, articles, and conference talks.

Requirements

• 10+ years of experience in security engineering, product security, or security architecture
• Experience securing financial infrastructure or blockchain platforms
• Strong understanding of cryptographic systems, wallet architectures, and key management models
• Familiarity with MPC, threshold signatures, or HSM-backed key management
• Experience performing system-level threat modelling and security architecture reviews
• Solid knowledge of distributed systems, networking protocols, and cloud infrastructure (AWS)
• Experience with software supply-chain security and securing the dev environment end to end
• Experience managing security and infrastructure configuration as code
• Familiarity with maintaining SOC 2, ISO 27001, ISO 22301, and related certifications
• Knowledge of industry security frameworks such as the NIST Cybersecurity Framework
• Strong understanding of authentication systems, authorization models, and applied cryptography
• Experience working with modern backend languages such as TypeScript or Rust
• Clear communication skills to translate complex security risks into practical engineering decisions

Responsibilities

• Lead product security architecture across the platform
• Analyze and secure key management, signing workflows, and transaction pipelines
• Conduct system-level threat modeling for new features, protocols, and blockchain integrations
• Design and review security-sensitive components such as auth systems, authorization models, and cryptographic workflows
• Define and implement defense-in-depth controls across application, infrastructure, and protocol layers
• Own and expand software supply-chain security
• Drive infrastructure and security configuration into version-controlled code in GitHub
• Work with engineering teams to ensure secure design decisions during product development and architectural planning
• Investigate emerging risks across blockchain protocols, custody models, and cryptographic systems
• Support ongoing SOC 2, ISO, and certification work
• Support incident response and root-cause analysis for security-critical events
• Provide day-to-day security support to developers
• Represent DFNS in security architecture reviews with tier-one banks, auditors, and partners
• Contribute to security research and knowledge sharing through articles, talks, or technical publications