Senior Security Engineer, Digital Assets Platform

Citi; New York (NY); On-site; USD 142,000 - 213,000; Full time

Job summary

Citi in New York is seeking a Senior Security Engineer (VP) to lead secure backend development for CIDAP. You will design cryptographic services, integrate HSMs, and implement MPC-based key management in a large-scale financial platform.

The role demands deep cryptography expertise, production Java skills, and strong security design across zero-trust, SAST/DAST tooling, and CI/CD pipelines. On-site role in NYC.

Qualifications

• 7-10 years of software engineering with a focus on security, cryptography, or secure systems.
• Strong production-level backend Java experience building security-critical services.
• Hands-on experience integrating HSMs via PKCS#11/JCE/JCA or vendor APIs.
• Practical understanding of MPC protocols, TSS, or distributed key management.
• In-depth knowledge of applied cryptography: AES-GCM, RSA, ECC, signatures, hashing.
• Familiarity with zero-trust, least-privilege, secrets management, mTLS, and secure enclaves.
• Experience with threat modelling frameworks and security design reviews.
• Understanding CI/CD security tooling: SAST/DAST, dependency and secrets scanning.
• Strong grasp of distributed systems, microservices, and secure inter-service communication patterns.

Responsibilities

• Design, develop, and maintain security-critical Java backend services, including cryptographic libraries and signing workflows.
• Own HSM integration, API integration, key generation/rotation, and policy enforcement.
• Architect and implement MPC protocols and threshold schemes for distributed key management.
• Apply cryptographic best practices across the platform: AES-GCM, RSA, ECC, ECDSA, HKDF/PBKDF2.
• Define secure design patterns for distributed systems: zero-trust, mutual TLS, certificate lifecycle, secure enclaves.

Skills

Java backend

Cryptography

HSM integration

MPC protocols

Security architecture

Threat modelling

CI/CD security

Distributed systems

API security

Education

Bachelor's degree

Advanced degree preferred

Tools

PKCS#11

JCE/JCA

MPC libraries

Security tooling

Job description

Citi in New York is seeking a Senior Security Engineer (VP) to lead secure backend development for CIDAP. You will design cryptographic services, integrate HSMs, and implement MPC-based key management in a large-scale financial platform.

The role demands deep cryptography expertise, production Java skills, and strong security design across zero-trust, SAST/DAST tooling, and CI/CD pipelines. On-site role in NYC.