Principal Security Architect (On-Chain & Digital Assets)

As a Principal Security Architect at a regulated digital-asset platform operating globally, you own security architecture across the custody and on-chain layers. You define and implement security requirements spanning architecture, engineering, operations, and regulatory assurance. This is a hands-on principal-level opportunity for a security architect with deep digital-asset expertise who can translate complex technical risks into resilient controls and clear business outcomes.

What you'll do

• Own end-to-end security architecture for the custody and on-chain technology stack
• Define security requirements and controls for HSM and MPC-based key management, transaction authorization, signing quorums, address whitelisting, and hot/cold wallet segregation
• Establish secure processes for key ceremonies, delegated cold custody, staking deposits and withdrawals, and other critical digital-asset operations
• Develop crypto-specific security standards, privileged-access controls, and secure SDLC requirements within a multi-account AWS environment
• Partner with centralized Infrastructure Security, Application Security, IAM, and SOC teams to implement and maintain platform security capabilities
• Define blockchain and custody-specific detection use cases for the SOC
• Lead incident response procedures for crypto-specific scenarios, including key compromise, unauthorized transactions, and significant on-chain incidents, in collaboration with Corporate Security
• Conduct detailed threat modeling and security reviews covering internal ledger mechanisms, balance idempotency, withdrawal sequencing, and smart contract integrations
• Protect the integrity of transaction and funds flows across the platform by identifying and mitigating architectural and operational risks
• Direct security assessments and ongoing assurance activities for external custody providers, execution systems, blockchain analytics solutions, Travel Rule tools, and treasury integrations
• Map security controls to relevant international regulatory frameworks, including MiCA, DORA, FCA, and MAS requirements
• Collaborate with market and regulatory teams to maintain appropriate security and compliance controls as the platform expands internationally
• Translate complex cryptographic, infrastructure, and digital-asset risks into clear business and regulatory implications for non-security stakeholders

What you bring

• 10+ years of professional experience in information security, with a proven track record as a Security Architect, Principal Security Engineer, or technical security lead
• Demonstrated experience securing digital-asset custody platforms, high-throughput crypto environments, or regulated financial infrastructure
• Deep practical knowledge of crypto custody and wallet architecture, including Multi-Party Computation (MPC), Hardware Security Modules (HSMs), key ceremonies, and signing-policy design
• Strong cloud security expertise, preferably within AWS environments and regulated organizations
• Practical experience mapping security controls to recognized frameworks and regulatory requirements, including ISO 27001, SOC 2, and NIST
• Strong experience conducting threat modeling, security assessments, risk analysis, and incident response
• Ability to communicate sophisticated cryptographic and technical security risks clearly to business leaders, product teams, engineers, compliance professionals, and regulators
• Proven ability to operate effectively within a matrixed security organization and collaborate with dedicated IAM, AppSec, SOC, and Infrastructure Security functions
• Strong understanding of security architecture, secure software development, access controls, operational security, and risk management
• Experience working with regulated digital-asset, fintech, financial services, or blockchain environments

Nice to have

• Hands-on experience with Kubernetes, containers, Terraform or other Infrastructure as Code technologies, API security, or Python automation
• Experience with Web3 dependency and software supply-chain security
• Industry certifications such as CISSP, CISM, CCSP, or CCSSA
• Professional fluency in spoken and written Mandarin for regional operations and cross-functional engineering collaboration

What we offer

• Competitive compensation package
• Fully remote working
• International and distributed working environment
• Opportunity to work on security architecture for digital-asset custody, blockchain, and on-chain infrastructure
• Exposure to complex fintech, cryptocurrency, and regulated financial technology environments
• Collaboration with specialized security, engineering, compliance, risk, product, and operations teams
• Opportunities to influence security architecture and controls across international markets
• Team-building initiatives and company events
• Senior-level scope with significant ownership over critical security architecture and risk management