Taurus SA operates an enterprise-grade platform for custody of digital assets, tokenized-asset issuance and lifecycle management, institutional trading, and interbank collateral and settlement workflows. Founded in 2018, it is regulated by FINMA as a Swiss securities firm.

View jobs by Taurus SA

Skills

Candidate Availability

Hybrid · Lausanne · Required Hybrid · Switzerland · Required

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will secure product architecture, cryptographic systems, code, smart contracts, HSM integrations, and confidential-computing components. You will model threats, lead penetration testing, build security controls across delivery and deployment systems, and partner with engineers to ship fixes. You will also support incident response, audits, investigations, and regulatory technical controls.

Requirements

Master's or PhD in computer science, IT security engineering, or cryptography
7+ years of application security, product security, offensive security, or security engineering experience
Security-critical environment experience
English fluency
Security code-review experience in at least two of Go, C/C++, TypeScript, and Python
Threat modeling, secure design review, and penetration-testing experience
Applied cryptography knowledge, including PKI, TLS, X.509, AES, RSA, ECDSA, EdDSA, key management, and secure signing workflows
HSM and PKCS#11 experience
Kubernetes and container security experience
Cloud IAM, workload identity, secrets management, and policy-as-code familiarity
Confidential-computing or secure-hardware experience
Ability to communicate complex security topics clearly

Responsibilities

Own product security for applicable digital-asset products
Contribute to security architecture for HSMs, confidential computing, MPC, and cryptographic systems
Perform security reviews of code, cryptographic workflows, smart contracts, HSM integrations, and enclave-based components
Model threats and review architectural designs before release
Lead penetration tests, reproduce findings, and validate remediation plans
Build security guardrail automation across CI/CD pipelines, software supply chains, Kubernetes environments, and deployment platforms
Design and ship security fixes with product engineers
Review authorization models, privilege management, identity integrations, and access controls
Support incident response, vulnerability management, and security investigations
Support client audits, RFPs, security workshops, and regulatory discussions
Translate regulatory and compliance requirements into technical controls
Monitor security trends and apply corrective actions

Benefits

Hybrid remote work
Flexible working hours
Team events