Principal Security Architect (On-Chain & Digital Assets)

As a Principal Security Architect at a regulated digital-asset platform operating globally, you own security architecture across the custody and on-chain layer. You will define and implement security requirements spanning architecture, engineering, operations, and regulatory assurance. This is a hands-on principal-level opportunity for a security architect with deep digital-asset expertise who can translate complex technical risks into resilient controls and clear business outcomes. The role is based in India.

What you'll do

• Own end-to-end security architecture for the custody and on-chain technology stack.
• Define security requirements and controls for HSM and MPC-based key management, transaction authorization, signing quorums, address whitelisting, and hot/cold wallet segregation.
• Establish secure processes for key ceremonies, delegated cold custody, staking deposits and withdrawals, and other critical digital-asset operations.
• Develop crypto-specific security standards, privileged-access controls, and secure SDLC requirements within a multi-account AWS environment.
• Partner with Infrastructure Security, Application Security, IAM, and SOC teams to implement and maintain platform security capabilities.
• Define blockchain and custody-specific detection use cases for the SOC.
• Lead incident response procedures for crypto-specific scenarios, including key compromise, unauthorized transactions, and significant on-chain incidents, in collaboration with Corporate Security.
• Conduct detailed threat modeling and security reviews covering internal ledger mechanisms, balance idempotency, withdrawal sequencing, and smart contract integrations.
• Protect the integrity of transaction and funds flows across the platform by identifying and mitigating architectural and operational risks.
• Direct security assessments and ongoing assurance activities for external custody providers, execution systems, blockchain analytics solutions, Travel Rule tools, and treasury integrations.
• Map security controls to relevant international regulatory frameworks, including MiCA, DORA, FCA, and MAS requirements.
• Collaborate with market and regulatory teams to maintain appropriate security and compliance controls as the platform expands internationally.
• Translate complex cryptographic, infrastructure, and digital-asset risks into clear business and regulatory implications for non-security stakeholders.

What you bring

• 10+ years of professional experience in information security, with a proven track record as a Security Architect, Principal Security Engineer, or technical security lead.
• Demonstrated experience securing digital-asset custody platforms, high-throughput crypto environments, or regulated financial infrastructure.
• Deep practical knowledge of crypto custody and wallet architecture, including Multi-Party Computation (MPC), Hardware Security Modules (HSMs), key ceremonies, and signing-policy design.
• Strong cloud security expertise, preferably within AWS environments and regulated organizations.
• Practical experience mapping security controls to recognized frameworks and regulatory requirements, including ISO 27001, SOC 2, and NIST.
• Strong experience conducting threat modeling, security assessments, risk analysis, and incident response.
• Ability to communicate sophisticated cryptographic and technical security risks clearly to business leaders, product teams, engineers, compliance professionals, and regulators.
• Proven ability to operate effectively within a matrixed security organization and collaborate with dedicated IAM, AppSec, SOC, and Infrastructure Security functions.
• Strong understanding of security architecture, secure software development, access controls, operational security, and risk management.
• Experience working with regulated digital-asset, fintech, financial services, or blockchain environments.

Nice to have

• Hands-on experience with Kubernetes, containers, Terraform or other Infrastructure as Code technologies, API security, or Python automation.
• Experience with Web3 dependency and software supply-chain security.
• Industry certifications such as CISSP, CISM, CCSP, or CCSSA.
• Professional fluency in spoken and written Mandarin for regional operations and cross-functional engineering collaboration.

What we offer

• Competitive compensation package.
• Fully remote working opportunity.
• International and distributed working environment.
• Exposure to complex fintech, cryptocurrency, and regulated financial technology environments.
• Collaboration with specialized security, engineering, compliance, risk, product, and operations teams.
• Opportunities to influence security architecture and controls across international markets.
• Team-building initiatives and company events.
• Senior-level scope with significant ownership over critical security architecture and risk management.