Senior Security Engineer - Crypto, HSM & MPC (Backend Java)

Citigroup Inc.; New York (NY); On-site; USD 142,000 - 213,000; Full time

Job summary

Citi’s Integrated Digital Assets Platform (CIDAP) seeks a Senior Security Engineer (VP) in New York to design and implement cryptographic security for digital asset custody and signing workflows.

You'll own HSM integration, MPC protocols, and secure design patterns, collaborating with Cybersecurity, Risk, and Architecture teams to ensure zero‑trust security across services. This role writes production code daily in Java and shapes Citi's security roadmap.

Qualifications

• 7–10 years of software engineering with a focus on security or cryptography.
• Proficient in Java backend development for security‑critical services.
• Hands‑on experience with HSMs and cryptographic library integration.

Responsibilities

• Design and maintain security‑critical Java backend services.
• Own HSM integration and key management workflows.
• Architect MPC protocols and threshold signature schemes.
• Apply cryptographic best practices across the platform.
• Define secure design patterns for zero‑trust and mutual TLS.
• Collaborate with Cybersecurity and Risk teams on threat modelling.
• Lead security reviews and integrate SAST/DAST into CI/CD.
• Engage with vendors and standards bodies to inform roadmap.
• Act as escalation point for security incidents and crypto decisions.

Skills

Backend Java

HSM integration

MPC protocols

Cryptography

Security design

Threat modelling

CI/CD security

Distributed systems

Education

Bachelor's in CS/Engineering

Master's/PhD in Cryptography/InfoSec

Tools

PKCS#11

JCE/JCA

MPC libraries

OpenSSL

Job description

Citi’s Integrated Digital Assets Platform (CIDAP) seeks a Senior Security Engineer (VP) in New York to design and implement cryptographic security for digital asset custody and signing workflows.

You'll own HSM integration, MPC protocols, and secure design patterns, collaborating with Cybersecurity, Risk, and Architecture teams to ensure zero‑trust security across services. This role writes production code daily in Java and shapes Citi's security roadmap.