Taurus SA operates an enterprise-grade platform for custody of digital assets, tokenized-asset issuance and lifecycle management, institutional trading, and interbank collateral and settlement workflows. Founded in 2018, it is regulated by FINMA as a Swiss securities firm.

View jobs by Taurus SA

Skills

Candidate Availability

Hybrid · Lausanne · Required

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will own product security across digital-asset products and contribute to security architecture for cryptographic systems. You will review code and designs, model threats, lead penetration testing, automate security controls, partner with engineers on fixes, and support incident response, audits, and regulatory discussions.

Requirements

Master's or PhD in computer science, IT security engineering, or cryptography
7+ years of experience in application security, product security, offensive security, or security engineering
Experience in security-critical or regulated environments
Fluent written and spoken English
Security code-review experience in at least two of Go, C/C++, TypeScript, and Python
Threat modeling, secure design review, and penetration-testing skills
Applied cryptography knowledge, including PKI, TLS, X.509, AES, RSA, ECDSA, EdDSA, and key management
Experience with HSM technologies and PKCS#11
Kubernetes and container-security experience
Familiarity with cloud IAM, workload identity, secrets management, and policy-as-code
Experience with secure hardware or confidential computing technologies

Responsibilities

Own product security for applicable digital-asset products
Contribute to security architecture for HSMs, confidential computing, MPC, and cryptographic systems
Perform security reviews of application code, cryptographic workflows, smart contracts, HSM integrations, and enclave-based components
Model threats and review architectural designs before release
Lead and review penetration tests, reproduce findings, and validate remediation plans
Build and own security automation across CI/CD pipelines, software supply chains, Kubernetes environments, and deployment platforms
Partner with product engineering teams to design and ship fixes
Review authorization models, privilege management, identity integrations, and access controls
Support incident response, vulnerability management, and security investigations
Support client audits, RFPs, security workshops, and regulatory discussions
Translate regulatory requirements into technical controls
Monitor security trends and apply corrective actions

Benefits

Hybrid remote work
Flexible working hours
Fun team events