Senior Security Engineer, Digital Asset Custody

# Senior Security Engineer, Digital Asset Custody Apply
** Job#: 3037301
***
* Job Description:

**** Senior Security Engineer – Digital Asset Custody
**** Position Overview
** We are seeking a highly experienced Senior Security Engineer, Digital Asset Custody to serve as a technical authority for secure custody platforms supporting digital assets. This is a hands-on, high-impact individual contributor role responsible for designing and owning key management systems, custody architecture, and enterprise security controls.

You will play a critical role in shaping the security and risk posture of digital asset platforms, working closely with engineering, cybersecurity, risk, and leadership teams to deliver secure, resilient, and scalable custody solutions.
** Why Join Us
** This role offers the opportunity to build the foundational security layer for digital asset custody platforms, working at the intersection of cryptography, blockchain, and enterprise security in a high-impact environment.
** Key Responsibilities
** Key Management & Cryptographic Architecture
* Design and implement institutional-grade key management systems, including:
+ Hardware Security Modules (HSMs)  + Multi-Party Computation (MPC)  + Secure key generation, storage, rotation, signing, and recovery
* Define and evaluate architectures across hot, warm, and cold wallet models
* Ensure compliance with security, regulatory, and audit requirements
* Partner with cybersecurity and risk teams to embed zero-trust and defense-in-depth principles
** Custody Policy & Governance
*** Lead the design and development of a Custody Policy Engine to govern:
+ Transaction authorization and approvals  + Role-based access and segregation of duties  + Transaction limits, controls, and exception handling  + Policy versioning, auditability, and enforcement
* Translate business, legal, and risk requirements into technical controls and automation
* Serve as a trusted advisor on custody governance and policy design
** Disaster Recovery & Incident Response
*** Own custody-specific disaster recovery strategies, including:
+ Key recovery and quorum loss scenarios  + Chain-related failure events
* Develop and maintain incident response plans and recovery runbooks
* Partner with Operations, Security, and SRE teams to ensure readiness and resilience
* Lead post-incident reviews, root cause analysis, and long-term remediation planning
** Custody Architecture & Risk Management
*** Serve as the technical authority for custody architecture, ensuring consistency across wallets, blockchains, and environments
* Identify risks early and define clear mitigation strategies and trade-offs
* Ensure systems scale securely across multiple assets, chains, and tokenized products
* Drive enterprise-wide improvements in security, resilience, and engineering rigor
** Engineering Excellence & AI Utilization
*** Apply modern engineering practices to build secure, scalable, and observable systems
* Leverage GenAI and agentic AI tools to enhance:
+ Threat modeling and architecture design  + Code development, testing, and validation  + Documentation and knowledge sharing
* Promote high standards for AI-assisted engineering with a focus on accuracy and safety
** Required Qualifications
*** 10+ years of software engineering experience, with focus on security, cryptography, or high-risk systems
* Hands-on experience with:
+ HSMs, MPC frameworks, and secure key management systems
* Experience with Web3 security tools (e.g., Slither, Mythril, Foundry Fuzzing)
* Proficiency in low-level or systems programming languages such as C, C++, Rust, or Go
* Strong understanding of distributed systems, secure architectures, and fault-tolerant design
* Experience collaborating with security auditors (e.g., Trail of Bits, Halborn)
* Proven ability to operate as a technical leader and decision-maker without direct reports
** Preferred Qualifications
*** Experience with crypto custody platforms, blockchain systems, or digital asset infrastructure
* Ownership of incident response, disaster recovery, or security runbooks
* Ability to communicate risk-based decisions to technical and non-technical audiences
* Strong systems-thinking mindset across technology, security, governance, and operations
* Experience leveraging AI tools in engineering workflows
** What Success Looks Like
*** Secure, resilient, and fully auditable key management and custody systems
* Well-defined and tested failure modes and recovery strategies
* Fast, effective response to incidents with clear accountability
* Scalable custody architecture supporting multiple assets and blockchain networks
* Recognition as a key technical authority driving digital asset custody strategy

EEO Employer Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic…