Senior Security Engineer – Digital Asset Custody

Location: Southlake, TX (Primary) / Austin, TX (Secondary) – Hybrid (4 days/week onsite)

Position Type: 12 Months Contract (Potential to convert to FTE)

About the Role

We are seeking a Senior Security Engineer to serve as the lead technical authority for institutional digital asset custody and cryptographic engineering. In this high-impact, hands-on individual contributor role, you will define custody architecture, drive key management strategies, and establish robust risk postures across enterprise digital asset and blockchain platforms.

You will own foundational design decisions spanning Hardware Security Modules (HSMs), Multi-Party Computation (MPC), automated policy enforcement, disaster recovery, and incident response. Operating with high autonomy, you will bridge the gap between engineering teams, security architects, compliance partners, and executive leadership in a mission-critical, high-trust environment.

Key Responsibilities

• Cryptographic Architecture & Key Management: Design, implement, and evolve enterprise-grade cryptographic key management architectures across HSMs and MPC frameworks; define clear trade-offs across hot, warm, and cold storage models for secure key generation, storage, signing, rotation, and recovery.
• Custody Policy Engine & Governance: Architect a deterministic, code-driven custody policy engine governing transaction limits, approvals, authorization rules, exception handling, and segregation of duties in alignment with regulatory and audit standards.
• Resilience, DR & Incident Response: Formulate and maintain custody-specific disaster recovery (DR) runbooks and failover procedures addressing key recovery, quorum loss scenarios, and blockchain network anomalies; lead post-incident technical reviews and long-term remediation.
• Custody Architecture & Scalability: Serve as the domain architecture authority, ensuring consistent security controls across diverse blockchains, smart contracts, wallet infrastructures, and tokenized products without compromising risk posture.
• Security & Audit Collaboration: Partner closely with internal Cybersecurity and external premier security audit firms (e.g., Trail of Bits, Halborn) to remediate vulnerabilities and maintain zero-trust principles.
• AI-Augmented Engineering: Utilize modern generative and agentic AI tools to accelerate threat modeling, architectural reviews, technical documentation, and test scenario generation.

Minimum Qualifications

• 10+ years of software and security engineering experience, with deep specialization in cryptographic architectures and security-sensitive distributed systems.
• Proven hands-on experience designing and operating systems with Hardware Security Modules (HSMs), Multi-Party Computation (MPC) protocols, and secure key management systems.
• Strong programming proficiency in systems and cryptography implementation languages such as Go, Rust, C++, or C.
• Practical experience utilizing Web3 security and smart contract analysis tools (e.g., Slither, Mythril, Foundry Fuzzing).
• Demonstrated track record of partnering with tier-1 external security auditors and independent assessment teams.
• Proven technical leadership and architectural influence in high-risk, fault-tolerant environments without requiring formal people management authority.

Preferred Qualifications

• Direct technical background in institutional digital asset custody platforms, wallet architectures, or public/private blockchain protocols.
• Prior experience designing and operationalizing high-availability disaster recovery runbooks, multi-signature/quorum recovery, and security incident response processes.
• Strong ability to articulate complex cryptographic and risk-based trade-offs to both executive and technical stakeholders.
• Practical exposure to applying generative AI and developer tooling to streamline threat modeling, testing, and engineering workflows.

By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively “Judge”) to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.