Bitcoin Security Engineer: Offensive Crypto & Custody

Strategy; Tysons (VA); On-site; USD 104,000 - 187,000; Full time

Job summary

Strategy is expanding its Bitcoin Security program with a dedicated offensive-security function. The Bitcoin Security Engineer role is hands-on and highly technical, focusing on cryptographic key materials, signing ceremonies, custody controls, and related infrastructure.

You will probe wallets, hardware, protocols, and custodial processes to identify weaknesses before adversaries do. Based in Tysons Corner, Virginia, this on-site role requires leadership in threat modeling, vulnerability

Qualifications

• Bachelor's degree in CS, Cryptography, InfoSec, Engineering, or related field.
• Master's degree strongly preferred; equivalent offensive-security experience considered.
• 6+ years of hands-on pentesting/red-team in cryptographic/financial/blockchain environments.

Responsibilities

• Bitcoin & Wallet Penetration Testing across single-sig, multisig, MPC, and hardware wallets.
• Design adversarial simulations of signing ceremonies and transaction workflows.
• Test hardware wallets, HSMs, secure elements, and air-gapped devices.
• Test Bitcoin node, RPC, PSBT handling, and derived-path validation.
• Assess blockchain-adjacent tech: smart contracts, bridges, oracles, on-chain logic.
• Lead security research into custodians and third-party services with threat modeling.
• Maintain threat models and attack surface inventories for custody chain.
• Produce clear, reproducible reports with POC exploits and remediation steps.
• Develop tooling and automation for repeatable bitcoin security testing.

Skills

Penetration testing

Red team

Crypto systems

Bitcoin testing

Key management

HSMs

PSBT

Multisignature

MPC

Python

Rust

C/C++

Go

Threat modeling

Communication skills

Adversarial testing

Education

Bachelor's degree in Computer Science, Cryptography, Information Security, Engineering, or related field

Master's degree in a relevant discipline

Tools

OSCP/OSEP/OSED

GIAC/GREM/GWAPT

Blockchain security credentials

Python tooling

Job description

Strategy is expanding its Bitcoin Security program with a dedicated offensive-security function. The Bitcoin Security Engineer role is hands-on and highly technical, focusing on cryptographic key materials, signing ceremonies, custody controls, and related infrastructure.

You will probe wallets, hardware, protocols, and custodial processes to identify weaknesses before adversaries do. Based in Tysons Corner, Virginia, this on-site role requires leadership in threat modeling, vulnerability