Principal Security Architect (On-Chain & Digital Assets)

Accountabilities

• • Own end-to-end security architecture for the custody and on-chain technology stack.

  • Define security requirements and controls for HSM and MPC-based key management, transaction authorization, signing quorums, address whitelisting, and hot/cold wallet segregation.

  • Establish secure processes for key ceremonies, delegated cold custody, staking deposits and withdrawals, and other critical digital-asset operations.

  • Develop crypto-specific security standards, privileged-access controls, and secure SDLC requirements within a multi-account AWS environment.

  • Partner with centralized Infrastructure Security, Application Security, IAM, and SOC teams to implement and maintain platform security capabilities.

  • Define blockchain and custody-specific detection use cases for the SOC.

  • Lead incident response procedures for crypto-specific scenarios, including key compromise, unauthorized transactions, and significant on-chain incidents, in collaboration with Corporate Security.

  • Conduct detailed threat modeling and security reviews covering internal ledger mechanisms, balance idempotency, withdrawal sequencing, and smart contract integrations.

  • Protect the integrity of transaction and funds flows across the platform by identifying and mitigating architectural and operational risks.

  • Direct security assessments and ongoing assurance activities for external custody providers, execution systems, blockchain analytics solutions, Travel Rule tools, and treasury integrations.

  • Map security controls to relevant international regulatory frameworks, including MiCA, DORA, FCA, and MAS requirements.

  • Collaborate with market and regulatory teams to maintain appropriate security and compliance controls as the platform expands internationally.

  • Translate complex cryptographic, infrastructure, and digital-asset risks into clear business and regulatory implications for non-security stakeholders.

  Requirements

  • 10+ years of professional experience in information security, with a proven track record as a Security Architect, Principal Security Engineer, or technical security lead.

  • Demonstrated experience securing digital-asset custody platforms, high-throughput crypto environments, or regulated financial infrastructure.

  • Deep practical knowledge of crypto custody and wallet architecture, including Multi-Party Computation (MPC), Hardware Security Modules (HSMs), key ceremonies, and signing-policy design.

  • Strong cloud security expertise, preferably within AWS environments and regulated organizations.

  • Practical experience mapping security controls to recognized frameworks and regulatory requirements, including ISO 27001, SOC 2, and NIST.

  • Strong experience conducting threat modeling, security assessments, risk analysis, and incident response.

  • Ability to communicate sophisticated cryptographic and technical security risks clearly to business leaders, product teams, engineers, compliance professionals, and regulators.

  • Proven ability to operate effectively within a matrixed security organization and collaborate with dedicated IAM, AppSec, SOC, and Infrastructure Security functions.

  • Strong understanding of security architecture, secure software development, access controls, operational security, and risk management.

  • Experience working with regulated digital-asset, fintech, financial services, or blockchain environments.

  • Hands-on experience with Kubernetes, containers, Terraform or other Infrastructure as Code technologies, API security, or Python automation is an advantage.

  • Experience with Web3 dependency and software supply-chain security is a plus.

  • Industry certifications such as CISSP, CISM, CCSP, or CCSSA are advantageous.

  • Professional fluency in spoken and written Mandarin is beneficial for regional operations and cross-functional engineering collaboration.

  Benefits

  • Competitive compensation package.

  • Fully remote working opportunity.

  • International and distributed working environment.

  • Opportunity to work on security architecture for digital-asset custody, blockchain, and on-chain infrastructure.

  • Exposure to complex fintech, cryptocurrency, and regulated financial technology environments.

  • Collaboration with specialized security, engineering, compliance, risk, product, and operations teams.

  • Opportunities to influence security architecture and controls across international markets.

  • Team-building initiatives and company events.

  • Senior-level scope with significant ownership over critical security architecture and risk management.

  • Opportunity to contribute to the development of secure, scalable digital-asset infrastructure.