Bitcoin Security Engineer — Pen Test Crypto Custody

Strategy-Inc; Tysons (VA); On-site; USD 104,000 - 187,000; Full time

Job summary

Strategy is expanding its Bitcoin Security program with a dedicated offensive-security function to continuously test, validate, and harden the security of Strategy's bitcoin holdings, custody relationships, and supporting infrastructure.

The Bitcoin Security Engineer is a hands-on, deeply technical individual-contributor role responsible for adversarially assessing every layer of Strategy's bitcoin security posture—from cryptographic key material and signing ceremonies to the custodians,

Qualifications

• 6+ years of hands-on penetration testing, red-team, or exploit development.
• Strong cryptography knowledge and secure key management experience.
• Experience testing Bitcoin wallets, custody solutions, and related infrastructure.
• Security certifications preferred (e.g., OSCP, GIAC).
• Ability to translate technical findings into actionable guidance for engineers.

Responsibilities

• Plan and execute Bitcoin wallet penetration tests across single-sig, multisig, MPC, and hardware wallets.
• Design and run adversarial simulations of signing ceremonies and transaction workflows.
• Test hardware wallets, HSMs, secure elements, and related devices for vulnerabilities.
• Assess custody providers, exchanges, and service providers for key-management and recovery controls.
• Produce reproducible reports with fixes and collaborate with engineering teams for remediation.

Skills

Offensive security

Cryptography

Threat modeling

Security research

Communication skills

Bitcoin custody

Education

Bachelor's degree in Computer Science or related field

Master's degree preferred

Tools

Python

Rust

C/C++

Go

Job description

Strategy is expanding its Bitcoin Security program with a dedicated offensive-security function to continuously test, validate, and harden the security of Strategy's bitcoin holdings, custody relationships, and supporting infrastructure.

The Bitcoin Security Engineer is a hands-on, deeply technical individual-contributor role responsible for adversarially assessing every layer of Strategy's bitcoin security posture—from cryptographic key material and signing ceremonies to the custodians,