Taurus SA operates an enterprise-grade platform for custody of digital assets, tokenized-asset issuance and lifecycle management, institutional trading, and interbank collateral and settlement workflows. Founded in 2018, it is regulated by FINMA as a Swiss securities firm.

View jobs by Taurus SA

Skills

Candidate Availability

Hybrid · Lausanne · Required

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will own product security, contribute to security architecture, and review application code, cryptographic workflows, smart contracts, HSM integrations, and enclave-based components. You will model threats, lead penetration tests, automate security guardrails, design fixes with engineering teams, support incident response and audits, and translate regulatory requirements into technical controls.

Requirements

Master’s or PhD in computer science, IT security engineering, or cryptography
7+ years in application security, product security, offensive security, or security engineering
Experience in security-critical or regulated environments
Fluent written and spoken English
Security code review experience in at least two of Go, C/C++, TypeScript, and Python
Threat modeling, secure design reviews, and penetration testing
Applied cryptography knowledge including PKI, TLS, X.509, AES, RSA, ECDSA, EdDSA, and key management
Experience with HSM technologies and PKCS#11
Kubernetes and container security experience
Cloud IAM, workload identity, secrets management, and policy-as-code familiarity

Responsibilities

Own product security for applicable digital asset products
Contribute to security architecture for HSMs, confidential computing, MPC, and cryptographic systems
Perform security reviews of code, cryptographic workflows, smart contracts, HSM integrations, and enclave-based components
Model threats and review designs before release
Lead penetration tests and validate remediation plans
Build and own security automation across CI/CD, software supply chains, Kubernetes, and deployment platforms
Design and ship security fixes with product engineering teams
Review authorization models, privilege management, identity integrations, and access controls
Support incident response, vulnerability management, and security investigations
Support client audits, RFPs, security workshops, and regulatory discussions
Translate regulatory and compliance requirements into technical controls
Monitor security trends and apply corrective actions

Benefits

Hybrid remote work
Flexible working hours
Team events