VP, Senior Product Security Engineer
Galaxy Digital Inc. is a global digital-asset financial services and AI/HPC data-center infrastructure company.
About Galaxy Digital Inc.
Galaxy Digital Inc. operates a digital-assets platform spanning global markets, asset management, and blockchain infrastructure solutions, including trading, lending, derivatives, investment banking, staking, tokenization, and custody technology. It also develops AI and high-performance-computing data-center infrastructure, including its Helios campus. Galaxy is headquartered in New York City and has offices across North America, Europe, and Asia.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will assess the security of cloud applications, microservices, and operational components, and help engineering teams implement remediations. You will participate in secure software design and code reviews, assist with test plans, and provide technical guidance on mitigating findings. You will advise on cloud application and infrastructure security patterns, review authentication and authorization implementations, and research advanced security approaches such as MPC, multisignature, and confidential computing. You will provide training and thought leadership to improve secure software development practices.
Requirements
- Bachelor or post graduate diploma in cybersecurity or technology
- 5 years work experience in product security application security cloud security or security feature development
- Threat modeling
- Risk assessment
- Controls review
- Programming languages
- Managing SAST DAST and SCA and supporting engineers on vulnerabilities and mitigations
- In depth understanding of authentication and authorization TLS and PKI network security cloud security and system security
- Strong analysis skills and attention to detail
- Strong verbal and written communication skills
- Security or cloud certifications
Responsibilities
- Participate in secure software design and code reviews
- Develop and review test plans to ensure security coverage
- Assess findings and guide remediation, proposing technical solutions
- Advise on cloud application and infrastructure security design patterns
- Provide training and thought leadership for secure software development practices
- Review and improve authentication authorization and data access implementations
- Research and propose advanced security patterns such as MPC multisignature and confidential computing
Benefits
- Company paid health and protective benefits for employees and their eligible dependents
- Free virtual coaching and counseling sessions
- Employee Resource Groups