Principal Security Architect (On-Chain & Digital Assets)

As a Principal Security Architect at BTSE, you own security for the custody and on-chain layer of a regulated digital-asset platform end to end, spanning architecture, engineering, operations and regulatory assurance. You report into the central security function and define crypto-specific requirements while partnering with dedicated InfraSec, AppSec, IAM and SOC teams. You work closely with risk, compliance, product and engineering as the company builds out spot trading, custody, staking and on-chain services, understanding that in digital-asset custody a single key-management failure is a firm-ending event.

What you'll do

• Lead end-to-end security architecture for the full custody stack: HSM/MPC key management, transaction authorization, signing quorums, address whitelisting, hot/cold wallet segregation, key ceremonies, delegated cold custodians, and secure staking deposit/withdrawal paths
• Establish crypto-specific baseline standards, privileged-access controls, and secure SDLC requirements within a multi-account AWS environment, partnering with central InfraSec, AppSec, and IAM teams on delivery
• Define custody and blockchain detection use cases for the SOC, and directly manage incident response procedures for crypto-specific scenarios such as key compromise, unauthorized transactions, and on-chain incidents alongside Corporate Security
• Conduct rigorous threat modeling and security reviews across internal ledger mechanics, balance idempotency, withdrawal sequencing, and smart contract integrations to guarantee transaction money-path integrity
• Direct security assessments and ongoing assurance for external custody providers, execution systems, blockchain analytics, Travel Rule tools, and treasury integrations using group vendor security processes
• Own control mapping against international regulatory standards (MiCA, DORA, FCA, MAS) and collaborate with Global Market Teams to maintain compliance during international expansion

What you bring

• 10+ years in information security, with a proven track record as a security architect or technical lead securing digital-asset custody, high-throughput crypto platforms, or regulated financial infrastructure
• Direct operational experience securing crypto custody, with deep domain expertise in wallet architecture, Multi-Party Computation (MPC), Hardware Security Modules (HSMs), key ceremonies, and signing-policy design
• Strong cloud security fundamentals (AWS preferred) in a regulated environment, with practical experience mapping security controls to licensing conditions (ISO 27001, SOC 2, NIST)
• Demonstrated experience running threat modeling, risk assessments, and incident response, with the ability to translate technical cryptographic risk into clear business and regulatory impact for non-security teams and regulators
• Proven comfort operating in a matrixed security model, collaborating with dedicated IAM, AppSec, SOC, and infrastructure security teams rather than owning those central functions outright

Nice to have

• Hands-on experience with Kubernetes, containers, Infrastructure as Code (Terraform), API security, Python for automation, Web3 dependency supply-chain assurance, or industry certifications (CISSP, CISM, CCSP, CCSSA)
• Professional fluency in spoken and written Mandarin to support regional market operations and cross-functional engineering collaboration

What we offer

• Competitive compensation package
• Various team-building programs and company events

About BTSE

BTSE Group is a global leader in fintech and blockchain technology with three core business pillars: Exchange, Payments, and Infrastructure Development. The company serves over 100 corporate clients worldwide and provides white-label exchange and payment solutions spanning exchange infrastructure hosting and development, custody, wallets, payments, blockchain integration, and trading.