Taurus SA operates an enterprise-grade platform for custody of digital assets, tokenized-asset issuance and lifecycle management, institutional trading, and interbank collateral and settlement workflows. Founded in 2018, it is regulated by FINMA as a Swiss securities firm.

View jobs by Taurus SA

Skills

Candidate Availability

Hybrid · Lausanne · Required

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will own product security across applicable products and conduct security architecture, code, workflow, smart-contract, and integration reviews. You will model threats, lead penetration testing, build security automation for delivery infrastructure, support incident response, and translate regulatory requirements into practical technical controls.

Requirements

Master's degree or PhD in computer science, IT security engineering, or cryptography
7+ years of experience in application security, product security, offensive security, or security engineering
Experience in security-critical or regulated environments
Fluent written and spoken English
Security code-review experience in at least two of Go, C/C++, TypeScript, and Python
Threat modeling, secure design reviews, and penetration testing
Ability to identify business-logic flaws, authorization issues, cryptographic misuse, and complex attack paths
Applied cryptography knowledge including PKI, TLS, X.509, AES, RSA, ECDSA, EdDSA, key management, secure key storage, and signing workflows
Experience with HSM technologies and PKCS#11
Kubernetes and container security experience
Familiarity with cloud IAM, workload identity, secrets management, and policy-as-code
Experience implementing security controls

Responsibilities

Own product security for applicable digital asset products
Contribute to security architecture for HSMs, confidential computing, MPC, and cryptographic systems
Perform security reviews of application code, cryptographic workflows, smart contracts, HSM integrations, and enclave-based components
Model threats and review architectural designs before release
Lead and review penetration tests and validate remediation plans
Build security automation across CI/CD pipelines, software supply chains, Kubernetes environments, and deployment platforms
Design and ship security fixes with product engineering teams
Review authorization models, privilege management, identity integrations, and access controls
Support incident response, vulnerability management, and security investigations
Support client audits, RFPs, security workshops, and regulatory discussions
Translate regulatory and compliance requirements into technical controls
Monitor security trends and apply corrective actions

Benefits

Hybrid remote work
Flexible working hours
Fun team events