Principal Security Architect (On-Chain & Digital Assets)
New
J
JobgetherDigital Assets, Fintech
Based in GermanyFull-TimePrincipal
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 10+ years
- Required Skills
- AWSRisk Management
Requirements
- 10+ years of professional experience in information security, with a proven track record as a Security Architect or lead.
- Demonstrated experience securing digital-asset custody platforms or regulated financial infrastructure.
- Deep practical knowledge of crypto custody and wallet architecture, including MPC, HSMs, key ceremonies, and signing-policy design.
- Strong cloud security expertise, preferably within AWS environments.
- Practical experience mapping security controls to frameworks such as ISO 27001, SOC 2, and NIST.
- Strong experience conducting threat modeling, security assessments, risk analysis, and incident response.
- Ability to communicate complex technical security risks to business leaders and regulators.
- Proven ability to operate effectively within a matrixed security organization.
- Hands-on experience with Kubernetes, containers, Terraform, API security, or Python automation is an advantage.
- Experience with Web3 software supply-chain security is a plus.
- Certifications such as CISSP, CISM, CCSP, or CCSSA are advantageous.
Responsibilities
- Own end-to-end security architecture for the custody and on-chain technology stack.
- Define security requirements and controls for HSM and MPC-based key management, transaction authorization, signing quorums, and wallet segregation.
- Develop crypto-specific security standards and secure SDLC requirements within a multi-account AWS environment.
- Lead incident response procedures for crypto-specific scenarios such as key compromise or unauthorized transactions.
- Conduct detailed threat modeling and security reviews of internal ledger mechanisms and smart contract integrations.
- Direct security assessments for external custody providers, blockchain analytics, and Travel Rule tools.
- Map security controls to international regulatory frameworks including MiCA, DORA, FCA, and MAS.
View Full Description & ApplyYou'll be redirected to the employer's site
