Senior Product Security Engineer Architect

You will own product security across applicable products and conduct security architecture, code, workflow, smart-contract, and integration reviews. You will model threats, lead penetration testing, build security automation for delivery infrastructure, support incident response, and translate regulatory requirements into practical technical controls.

Responsibilities

• Own product security for applicable digital asset products
• Contribute to security architecture for HSMs, confidential computing, MPC, and cryptographic systems
• Perform security reviews of application code, cryptographic workflows, smart contracts, HSM integrations, and enclave-based components
• Model threats and review architectural designs before release
• Lead and review penetration tests and validate remediation plans
• Build security automation across CI/CD pipelines, software supply chains, Kubernetes environments, and deployment platforms
• Design and ship security fixes with product engineering teams
• Review authorization models, privilege management, identity integrations, and access controls
• Support incident response, vulnerability management, and security investigations
• Support client audits, RFPs, security workshops, and regulatory discussions
• Translate regulatory and compliance requirements into technical controls
• Monitor security trends and apply corrective actions

Requirements

• Master's degree or PhD in computer science, IT security engineering, or cryptography
• 7+ years of experience in application security, product security, offensive security, or security engineering
• Experience in security-critical or regulated environments
• Fluent written and spoken English
• Security code-review experience in at least two of Go, C/C++, TypeScript, and Python
• Threat modeling, secure design reviews, and penetration testing
• Ability to identify business-logic flaws, authorization issues, cryptographic misuse, and complex attack paths
• Applied cryptography knowledge including PKI, TLS, X.509, AES, RSA, ECDSA, EdDSA, key management, secure key storage, and signing workflows
• Experience with HSM technologies and PKCS#11
• Kubernetes and container security experience
• Familiarity with cloud IAM, workload identity, secrets management, and policy-as-code
• Experience implementing security controls

Benefits

• Hybrid remote work
• Flexible working hours
• Fun team events