VP Security Engineer – Digital Assets Platform

Citi; New York (NY); Hybrid; USD 142,000 - 213,000; Full time

Job summary

Citi’s Integrated Digital Assets Platform (CIDAP) seeks a Senior Security Engineer (VP) in New York to design and build secure backend services in Java, focusing on cryptography, key management, and wallet signing. You will join a core engineering team and influence cryptographic design patterns and security architecture.

You will own HSM integrations, MPC protocols, zero-trust design, threat modeling, and security reviews, collaborating with Cybersecurity, Risk, and Architecture teams to

Qualifications

• 7–10 years of software engineering with focus on security/cryptography
• Strong backend Java experience
• Hands-on HSM integration via PKCS#11/JCE
• Experience with MPC/TSS
• Deep crypto knowledge (AES/RSA/ECC)
• Familiarity with zero-trust, secrets management, mTLS
• Threat modeling frameworks (STRIDE/PASTA)
• CI/CD security tooling (SAST/DAST)

Responsibilities

• Design, develop, and maintain security-critical backend services in Java
• Own HSM integration and lifecycle management
• Architect MPC protocols and threshold schemes for key management
• Apply cryptographic best practices across the platform
• Define secure design patterns for distributed systems
• Collaborate with Cybersecurity, Risk, and Architecture teams for threat modeling
• Champion security-by-design and CI/CD security tooling
• Engage with external vendors and cryptographic standards bodies
• Act as escalation point for security incidents and crypto decisions

Skills

Backend Java

Cryptography

HSM integration

Security architecture

Threat modeling

CI/CD security

Distributed systems

Zero-trust

Education

Bachelor's in CS/Engineering

Master's/PhD in cryptography (advantage)

Tools

PKCS#11/JCE

MPC protocols

Job description

Citi’s Integrated Digital Assets Platform (CIDAP) seeks a Senior Security Engineer (VP) in New York to design and build secure backend services in Java, focusing on cryptography, key management, and wallet signing. You will join a core engineering team and influence cryptographic design patterns and security architecture.

You will own HSM integrations, MPC protocols, zero-trust design, threat modeling, and security reviews, collaborating with Cybersecurity, Risk, and Architecture teams to