Senior Security Engineer, Digital Asset Custody

Required Skills & Experience - 10+ years of software engineering experience with a strong focus on security-sensitive or cryptographic systems.\n- Hands-on experience with HSMs, MPC frameworks, and secure key management systems.\n- Experience with Web3 security tools such as Slither, Mythril, and Foundry Fuzzing.\n- Experience with cryptography-focused development languages including C, C++, Rust, or Go.\n- Experience working with third-party security auditors such as Trail of Bits, Halborn, or similar firms.\n- Proven ability to design systems where failure carries significant business or security risk.\n- Strong background in distributed systems, secure architectures, and fault-tolerant design.\n- Demonstrated success serving as a technical authority without direct people management responsibilities. Nice to Have Skills & Experience - Experience with crypto custody platforms, digital asset infrastructure, or blockchain ecosystems.\n- Ownership of incident response programs, disaster recovery design, or security runbooks.\n- Ability to clearly communicate risk-based trade-offs to both technical and non-technical stakeholders.\n- Strong systems-thinking mindset that connects technology, security, governance, and operations.\n- Comfortable challenging assumptions and proactively identifying risks in high-stakes environments.\n- Experience using AI tools to improve complex engineering workflows. Job Description We are hiring a Senior Security Engineer, Digital Asset Custody to serve as the technical authority for Crypto Custody engineering, with deep ownership of key management, custody security architecture, and risk posture across the client's digital asset platforms.\nThis is a hands-on, high-impact individual contributor role. This engineer will set technical direction, define custody architecture, and own critical design decisions across HSMs, MPC, key storage, policy enforcement, disaster recovery, and incident response.\n\nThe ideal candidate will have strong engineering judgment in high-risk, high-trust environments and the ability to operate independently while influencing engineering teams, architects, security partners, and senior leadership.\n\nResponsibilities\n\nCustody Key Management & Cryptographic Architecture:\n- Design, implement, and evolve institutional-grade key management architectures, including:\n- Hardware Security Modules (HSMs)\n- Multi-Party Computation (MPC)\n- Secure key generation, storage, rotation, signing, and recovery\n- Define architecture patterns and trade-offs across hot wallet, warm wallet, and cold storage models.\n- Ensure cryptographic solutions align with regulatory, security, and audit requirements.\n- Partner closely with Cybersecurity and Risk teams to incorporate defense-in-depth and zero-trust principles into custody designs.\n\nCustody Policy Engine & Governance:\nLead the design and development of the Custody Policy Engine, including:\n- Authorization, approvals, limits, and segregation of duties\n- Transaction controls and exception handling\n- Policy versioning, auditability, and enforcement\n\nAdditional responsibilities:\n- Ensure policies are code-driven, deterministic, observable, and testable.\n- Translate business, legal, and risk requirements into enforceable technical controls.\n- Serve as a trusted technical advisor on custody governance and policy topics.\n\nDisaster Recovery, Resilience & Incident Management\n- Own custody-specific disaster recovery strategies, including key recovery, quorum loss scenarios, and blockchain-related events.\n- Create and maintain incident response playbooks and recovery runbooks.\n- Partner with Operations, Security, and SRE teams to validate and test recovery procedures.\n- Lead post-incident reviews, root cause analyses, and long-term remediation efforts.\n\nCustody Architecture & Risk Management\n- Serve as the primary custody architecture authority across wallets, blockchains, environments, and platforms.\n- Identify architectural and operational risks and propose mitigation strategies with clear trade-off analysis.\n- Ensure custody solutions scale across multiple assets, chains, and future tokenized products.\n- Influence enterprise security standards by elevating security, resilience, and engineering rigor.\n\nAI-Augmented Engineering Excellence\nLeverage GenAI and agentic AI tools to accelerate:\n- Architecture design\n- Threat modeling\n- Documentation\n- Testing and reviews\n- Set expectations for AI-assisted engineering that prioritizes correctness, security, and quality.\n- Partner with engineering teams to improve architecture, code quality, and documentation across custody platforms. Insight Global