Senior Security Engineer: Crypto Backend & HSM/MPC Expert

Citi; New York (NY); On-site; USD 142,000 - 213,000; Full time

Benefits offered by this job

Medical

Dental & Vision

401(k)

Life Insurance

Paid time off

Paid holidays

Job summary

Citi's Integrated Digital Assets Platform team in New York seeks a Senior Security Engineer (VP) to design and build security‑critical Java backend services, architect HSM integration, and implement MPC/TSS for distributed key management in institutional crypto workflows. The successful candidate will own cryptographic design patterns and drive security across the platform used by global clients.

The role requires deep cryptography knowledge, zero‑trust principles, threat modeling with

Qualifications

• 7–10 years of software/secure systems experience.
• Strong backend Java experience with security focus.
• Hands-on HSM integration via PKCS#11/JCE or vendor APIs.

Responsibilities

• Design, develop, and maintain security‑critical Java backend services.
• Own HSM integration, including API and key lifecycle management.
• Architect MPC/TSS protocols for distributed key management.
• Apply cryptographic best practices across the platform (AES-GCM, RSA, ECC).
• Define secure design patterns for distributed systems and zero‑trust architecture.
• Collaborate with Cybersecurity, Risk, Architecture teams on threat modeling and reviews.
• Champion security by design and integrate SAST/DAST into CI/CD pipelines.
• Engage with external vendors to inform Citi's technology roadmap.

Skills

Java backend

HSM integration

MPC protocols

Cryptography

Security design patterns

Threat modeling

CI/CD security tooling

Distributed systems

Education

Bachelor's degree in CS/CE/Cybersecurity

Master's or PhD in Cryptography/Security

Tools

PKCS#11

JCE/JCA

MPC libraries

Job description

Citi's Integrated Digital Assets Platform team in New York seeks a Senior Security Engineer (VP) to design and build security‑critical Java backend services, architect HSM integration, and implement MPC/TSS for distributed key management in institutional crypto workflows. The successful candidate will own cryptographic design patterns and drive security across the platform used by global clients.

The role requires deep cryptography knowledge, zero‑trust principles, threat modeling with