Staff Security Engineer – Digital Asset Security

Iceberg; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Iceberg, a leading global financial technology company building infrastructure for secure digital assets, is seeking a Staff Security Engineer to join the Secure Digital Asset Operations team. You will blend security, cryptography, blockchain and asset operations to protect valuable assets.

You will design processes for secure handling, storage and management of digital assets, assess risks, and work with Finance, Product, Engineering and Security to lift the organisation's security posture.

Qualifications

• 8+ years in information security, with experience securing digital assets.
• Strong knowledge of crypto, blockchain, Web3 and/or smart contracts.
• Deep understanding of cryptography and key management, including the secure creation, distribution, storage and use of cryptographic keys.

Responsibilities

• Design, implement and continuously improve processes for the secure handling, storage and management of digital assets.
• Assess the security risks surrounding digital asset safeguards and identify opportunities to strengthen the organisation's security posture.
• Work closely with Finance, Product, Engineering and Information Security teams to implement security improvements.
• Develop ways to measure, monitor and communicate digital asset security posture to senior stakeholders.
• Advise the business on security methodologies, tooling and vendor integrations.
• Help establish and promote best practices for protecting both company and personal digital assets.
• Act as a trusted security advisor to the business, bringing structure and security expertise to complex and sometimes ambiguous problems.

Skills

Information security

Blockchain

Cryptography

Key management

Digital asset wallets

Secure offline systems

Stakeholder communication

Job description

We're working with a leading global financial technology company that is building infrastructure for a world where value can move as easily as information does today.

As digital assets become increasingly important to financial institutions and businesses, the security challenges around protecting them are becoming increasingly complex. We're looking for a Staff Security Engineer to join the Secure Digital Asset Operations team and play a key role in solving those challenges.

This isn't a traditional information security role. You'll be working at the intersection of security, cryptography, blockchain and digital asset operations, helping design the processes, technology and controls that keep highly valuable digital assets secure.

What you'll be doing:

• Design, implement and continuously improve processes for the secure handling, storage and management of digital assets.
• Assess the security risks surrounding digital asset safeguards and identify opportunities to strengthen the organisation's security posture.
• Work closely with Finance, Product, Engineering and Information Security teams to implement security improvements.
• Develop ways to measure, monitor and communicate digital asset security posture to senior stakeholders.
• Advise the business on security methodologies, tooling and vendor integrations.
• Help establish and promote best practices for protecting both company and personal digital assets.
• Act as a trusted security advisor to the business, bringing structure and security expertise to complex and sometimes ambiguous problems.

What we're looking for:

We're looking for someone who has deep security experience combined with expertise in digital assets. Ideally:

• 8+ years of experience in information security, with experience securing digital assets.
• Strong knowledge of crypto, blockchain, Web3 and/or smart contracts.
• Deep understanding of cryptography and key management, including the secure creation, distribution, storage and use of cryptographic keys.
• Hands-on experience with digital asset wallets, including software, hardware, MPC and/or multisig solutions.
• Experience working with secure offline systems/laptops.
• The judgement and discretion required to work with highly sensitive assets and information.
• Strong communication skills, with the ability to translate complex security and compliance requirements into practical solutions.
• Confidence working with both technical and senior business stakeholders and holding teams accountable for security outcomes.
• The ability to operate effectively in an environment where the road isn't always paved and priorities can change quickly.

Why consider it?

This is an opportunity to work on a security problem that is still relatively new and evolving rapidly.

You'll have significant ownership over how a major digital asset organisation protects its assets, working alongside experienced security, engineering and business leaders while helping shape the strategy, processes and technology behind the function.

You'll also get exposure to some very interesting technology across cryptography, key management, MPC, multisig wallets and blockchain infrastructure.

If you're a security engineer who wants to work on problems that sit well outside the traditional enterprise security environment, this is a role worth exploring.

For the right Candidate my client will consider Remote workers from other areas of the US.