Principal Security Architect (On-Chain & Digital Assets)
New
B
BTSEFintech, Blockchain
Hong Kong / APAC / Europe / Malta / Germany / Austria / Belgium / Bulgaria / Czechia / Cyprus / Croatia / Denmark / France / Finland / IrelandFull-TimePrincipal
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Mandarin
- Experience
- 10+ years
- Required Skills
- AWS
Requirements
- 10+ years in information security, with a proven track record as a security architect or technical lead securing digital-asset custody, high-throughput crypto platforms, or regulated financial infrastructure.
- Direct operational experience securing crypto custody, with deep domain expertise in wallet architecture, Multi-Party Computation (MPC), Hardware Security Modules (HSMs), key ceremonies, and signing-policy design.
- Strong cloud security fundamentals (AWS preferred) in a regulated environment, with practical experience mapping security controls to licensing conditions (ISO 27001, SOC 2, NIST).
- Demonstrated experience running threat modeling, risk assessments, and incident response, with the ability to translate technical cryptographic risk into clear business and regulatory impact for non-security teams and regulators.
- Proven comfort operating in a matrixed security model, collaborating with dedicated IAM, AppSec, SOC, and infrastructure security teams rather than owning those central functions outright.
- Hands-on experience with Kubernetes, containers, Infrastructure as Code (Terraform), API security, Python for automation, Web3 dependency supply-chain assurance, or industry certifications (CISSP, CISM, CCSP, CCSSA) is a plus.
- Professional fluency in spoken and written Mandarin is preferred.
Responsibilities
- Lead end-to-end security architecture for the full custody stack: HSM/MPC key management, transaction authorization, signing quorums, address whitelisting, hot/cold wallet segregation, key ceremonies, delegated cold custodians, and secure staking deposit/withdrawal paths.
- Establish crypto-specific baseline standards, privileged-access controls, and secure SDLC requirements within our multi-account AWS environment, partnering with central InfraSec, AppSec, and IAM teams on delivery.
- Define custody and blockchain detection use cases for the SOC, and directly manage incident response procedures for crypto-specific scenarios (key compromise, unauthorized transactions, on-chain incidents) alongside Corporate Security.
- Conduct rigorous threat modeling and security reviews across internal ledger mechanics, balance idempotency, withdrawal sequencing, and smart contract integrations to guarantee transaction money-path integrity.
- Direct security assessments and ongoing assurance for external custody providers, execution systems, blockchain analytics, Travel Rule tools, and treasury integrations using group vendor security processes.
- Own control mapping against international regulatory standards (MiCA, DORA, FCA, MAS) and collaborate with Global Market Teams to maintain compliance during international expansion.
View Full Description & ApplyYou'll be redirected to the employer's site
