Staff Security Engineer – Digital Assets

Iceberg; New York (NY); Remote; USD 150,000 - 235,000; Full time

Job summary

Iceberg is seeking a Staff Security Engineer to join the Secure Digital Asset Operations team. This role sits at the intersection of security, cryptography, blockchain and asset operations to design processes and controls that protect valuable digital assets.

You will work with Finance, Product, Engineering and Information Security to implement improvements, measure security posture and communicate risk to senior leaders. Remote work within the US may be considered for the right candidate.

Qualifications

• 8+ years of information security experience with digital assets.
• Strong knowledge of crypto, blockchain, Web3 and/or smart contracts.
• Deep understanding of cryptography and key management.
• Hands-on experience with digital asset wallets (software, hardware, MPC, multisig).
• Experience with secure offline systems/laptops.
• Ability to translate security requirements for both technical and senior stakeholders.
• Strong communication skills and accountability for security outcomes.
• Comfort working in a fast-changing environment with shifting priorities.

Responsibilities

• Design, implement and improve processes for secure handling, storage and management of digital assets.
• Assess security risks around digital asset safeguards and strengthen security posture.
• Collaborate with Finance, Product, Engineering and Information Security teams to implement security improvements.
• Develop ways to measure, monitor and communicate digital asset security posture to senior stakeholders.
• Advise the business on security methodologies, tooling and vendor integrations.
• Help establish best practices for protecting company and personal digital assets.
• Act as a trusted security advisor bringing structure and security expertise to complex problems.

Skills

InfoSec leadership

Cryptography

Blockchain/Web3

Key management

MPC/Multisig

Digital asset wallets

Secure offline systems

Stakeholder communication

Job description

Staff Security Engineer – Digital Assets

Locations: San Francisco, CA OR New York, NY

We’re working with a leading global financial technology company that is building infrastructure for a world where value can move as easily as information does today.

As digital assets become increasingly important to financial institutions and businesses, the security challenges around protecting them are becoming increasingly complex. We’re looking for a Staff Security Engineer to join the Secure Digital Asset Operations team and play a key role in solving those challenges.

This isn’t a traditional information security role. You’ll be working at the intersection of security, cryptography, blockchain and digital asset operations, helping design the processes, technology and controls that keep highly valuable digital assets secure.

What you’ll be doing:

• Design, implement and continuously improve processes for the secure handling, storage and management of digital assets.
• Assess the security risks surrounding digital asset safeguards and identify opportunities to strengthen the organisation’s security posture.
• Work closely with Finance, Product, Engineering and Information Security teams to implement security improvements.
• Develop ways to measure, monitor and communicate digital asset security posture to senior stakeholders.
• Advise the business on security methodologies, tooling and vendor integrations.
• Help establish and promote best practices for protecting both company and personal digital assets.
• Act as a trusted security advisor to the business, bringing structure and security expertise to complex and sometimes ambiguous problems.

What we’re looking for:

We’re looking for someone who has deep security experience combined with expertise in digital assets. Ideally:

• 8+ years of experience in information security, with experience securing digital assets.
• Strong knowledge of crypto, blockchain, Web3 and/or smart contracts.
• Deep understanding of cryptography and key management, including the secure creation, distribution, storage and use of cryptographic keys.
• Hands-on experience with digital asset wallets, including software, hardware, MPC and/or multisig solutions.
• Experience working with secure offline systems/laptops.
• The judgement and discretion required to work with highly sensitive assets and information.
• Strong communication skills, with the ability to translate complex security and compliance requirements into practical solutions.
• Confidence working with both technical and senior business stakeholders and holding teams accountable for security outcomes.
• The ability to operate effectively in an environment where the road isn’t always paved and priorities can change quickly.

Why consider it?

This is an opportunity to work on a security problem that is still relatively new and evolving rapidly.

You’ll have significant ownership over how a major digital asset organisation protects its assets, working alongside experienced security, engineering and business leaders while helping shape the strategy, processes and technology behind the function.

You’ll also get exposure to some very interesting technology across cryptography, key management, MPC, multisig wallets and blockchain infrastructure.

If you’re a security engineer who wants to work on problems that sit well outside the traditional enterprise security environment, this is a role worth exploring.

For the right Candidate my client will consider Remote workers from other areas of the US.