Senior Manager - Blockchain Security & Digital Asset Infrastructure

Senior Manager – Blockchain Security & Digital Asset Infrastructure

Location:

New York, Charlotte, Chicago, St. Louis, Boston

EY’s Blockchain & Digital Assets practice is seeking a highly experienced Senior Manager to serve as a lead technical architect and trusted advisor for institutional clients navigating the rapidly evolving digital asset ecosystem. This role combines deep technical expertise in cryptography, cybersecurity, and digital asset custody with strategic advisory capabilities to help organizations safeguard digital assets against traditional cyber threats and emerging AI‑enabled attack vectors.

The successful candidate will possess extensive hands‑on experience designing, implementing, and securing institutional‑grade digital asset infrastructure. This individual will work directly with leading financial institutions, digital asset custodians, exchanges, and crypto‑native organizations to develop resilient trust architectures and infrastructure security strategies.

• Infrastructure Safeguarding: Design, assess, and audit institutional‑grade digital asset custody solutions, including Multi‑Party Computation (MPC), Hardware Security Modules (HSMs), and air‑gapped cold storage environments.
• Protocol Analysis: Conduct technical evaluations of Bitcoin, Ethereum, and emerging Layer 1 and Layer 2 ecosystems, with emphasis on security assumptions, consensus mechanisms, attack vectors, and operational risks.
• AI‑Driven Threat Modeling: Develop defensive strategies to address AI‑assisted cybersecurity risks, including autonomous vulnerability discovery and multi‑stage attack scenarios.
• Cryptographic Implementation: Provide subject matter expertise in Elliptic Curve Cryptography (ECC), Zero‑Knowledge Proofs (ZKPs), threshold signature schemes, and distributed key management systems.
• Incident Response & Engineering: Lead technical incident response efforts during active security events, coordinating engineering and security teams to contain threats and strengthen infrastructure resilience.
• Strategic Advisory: Translate complex technical risks into actionable business intelligence for C‑suite stakeholders, with focus on infrastructure trust models and the long‑term utility of verifiable digital assets.
• Practice Development: Lead complex client engagements, manage cross‑functional teams, and support business development through thought leadership, market insights, and client pursuits.

• Deep understanding of institutional digital asset custody frameworks and key management practices.
• Strong technical expertise in blockchain protocols, cryptographic architectures, and cybersecurity engineering.
• Ability to communicate complex technical concepts effectively to both technical and executive audiences.
• Strong analytical, problem‑solving, and incident response capabilities.
• Experience leading large‑scale client engagements and managing diverse technical teams.
• Demonstrated ability to operate effectively in fast‑paced, high‑stakes environments.

• Bachelor’s degree in Computer Science, Engineering, Mathematics, Cybersecurity, or a related technical discipline.
• Minimum of 8 years of experience in cybersecurity, systems engineering, blockchain security, digital asset infrastructure, or cryptographic research.
• Demonstrated hands‑on experience managing private key life cycles, digital asset custody operations, signing ceremonies, and enterprise‑scale key management programs.
• Deep knowledge of Bitcoin and Ethereum architecture, including the Bitcoin UTXO model, Bitcoin Script, Lightning Network, EVM, account abstraction, validator operations, and staking mechanisms.
• Strong understanding of security models and architectural trade‑offs across blockchain ecosystems such as Solana, Cosmos, and Polkadot.
• Advanced knowledge of cryptographic primitives and protocols, including SHA‑256, Keccak, ECDSA, Schnorr signatures, Multi‑Party Computation (MPC), and threshold signature schemes.
• Experience with traditional cybersecurity domains, including Linux security, network segmentation and isolation, application and API security, and infrastructure…