Vice President, Senior Product Security Engineer
Galaxy Digital is a full-service digital asset firm offering institutional OTC trading, lending, derivatives, staking, tokenization, asset management, investment banking, and venture funding.
About Galaxy Digital
Galaxy Digital is a technology-driven financial services and investment management firm that offers institutions and direct clients a full suite of financial solutions spanning the digital assets ecosystem. The company operates three complementary businesses: Global Markets, Asset Management, and Digital Infrastructure Solutions.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will participate in assessments of advanced trading systems and blockchain architectures, followed by the facilitation and/or implementation of remediations. You will report to the Director of Product Security and work closely with Engineering, Product and Infrastructure teams to design and deliver secure software solutions at a rapid growth company.
Requirements
- Bachelor or post-graduate diploma in cybersecurity or technology
- 5 years work experience in product security, application security, cloud security, or software development of security features
- Threat modeling, risk assessment, controls review
- Programming languages
- Managing SAST, DAST, SCA, and helping software engineers with understanding vulnerabilities and selecting appropriate mitigation
- In depth understanding of at least a few of the following topics authentication and authorization technology, TLS and PKI, network security, cloud security, system security
- Strong analysis skills, detail oriented, strategic thinking
- Strong verbal and written communication skills, collaborative and solution driven
- Security or cloud certifications
Responsibilities
- Participate in relevant secure software design and code reviews
- Assist with development and review of test plans to ensure effective security coverage
- Assist teams with the mitigation of findings: assess the impacts, propose possible solutions, and provide technical guidance for implementation
- Provide expertise and advice on cloud application and infrastructure security design patterns
- Provide training and thought leadership for secure software development practices
- Review and improve implementations of authentication, authorization, data access and other security layers of our product stack
- Research and collaborate with product team members to make proposals to adopt advanced security patterns such as MPC, multisignature, confidential computing
Benefits
- Competitive base salary and discretionary bonus
- Competitive paid time off
- Great office location in central Mumbai (BKC)
- Company funded health and protective benefits for employees and their eligible dependents
- Free virtual coaching sessions through Headspace
- Opportunities to learn about the Crypto industry
- Smart entrepreneurial and fun colleagues
