Bitcoin Security Engineer — Pen-Tests & Custody Hardening

The Bitcoin Street Journal; Tysons (VA); Hybrid; USD 104,000 - 187,000; Full time

Job summary

Strategy, a leader in AI and bitcoin treasury services, seeks a Bitcoin Security Engineer in Tysons Corner, VA. This in‑person, full‑time role focuses on offensive security of Strategy’s bitcoin holdings, custody relations, and supporting infrastructure.

You will assess cryptographic materials, signing ceremonies, custodians, and related platforms, and report findings with actionable remediation guidance.

Qualifications

• Bachelor’s degree in Computer Science, Cryptography, Information Security, Engineering, or a related field; Master’s Degree strongly preferred.
• Equivalent demonstrable offensive‑security experience will be considered.
• Security certifications (OSCP, OSEP, OSED, GPEN, GXPN, GWAPT, GREM, CRTO, CRTL, or similar) strongly preferred.

Responsibilities

• Penetration testing of bitcoin wallet architectures (single-sig, multisig, MPC, hardware-wallets).
• Design and run adversarial simulations of signing ceremonies and transaction workflows.
• Test hardware wallets, HSMs, secure elements, and air‑gapped devices (firmware, fault‑injection, side‑channel).
• Test Bitcoin node, RPC, PSBT handling, fee/RBF logic, malleability, derivation-path validation, and P2P/mempool surfaces.
• Assess security of blockchain-related infrastructure (smart contracts, tokenization platforms, bridges, oracles).
• Lead threat modeling and attack-surface inventories for end-to-end bitcoin custody chain.
• Produce actionable findings with PoCs, severity, and remediation guidance; retest fixes.

Education

Bachelor’s degree in Computer Science, Cryptography, Information Security, Engineering, or related field

Master’s Degree in a relevant discipline strongly preferred

Equivalent demonstrable offensive-security experience

Tools

Python

Rust

C/C++

Go

Job description

Strategy, a leader in AI and bitcoin treasury services, seeks a Bitcoin Security Engineer in Tysons Corner, VA. This in‑person, full‑time role focuses on offensive security of Strategy’s bitcoin holdings, custody relations, and supporting infrastructure.

You will assess cryptographic materials, signing ceremonies, custodians, and related platforms, and report findings with actionable remediation guidance.