Senior Product Security Engineer / Architect [Lausanne]

As a Senior Product Security Engineer at Taurus, you own product security across our digital asset trading and infrastructure platform. You are a hands-on security partner who can review code, understand attack surfaces, build automation to enforce fixes, and ship solutions quickly. Your impact will be greatest in the cryptographic domain: keys, signing, HSMs, and the trust boundaries around them.

What you'll do

• Own product security for all applicable digital asset products: Taurus-PROTECT, Taurus-CAPITAL, Taurus-EXPLORER, and Taurus-NETWORK, and contribute to financial services product security
• Contribute to security architecture for HSMs, confidential computing, MPC, and cryptographic systems
• Perform security reviews of application code, cryptographic workflows, smart contracts, HSM integrations, and enclave-based components
• Model threats of new features and review architectural designs before release
• Lead and review penetration tests, reproduce findings, and validate remediation plans
• Build and own automation that enforces security guardrails across CI/CD pipelines, software supply chains, Kubernetes environments, and deployment platforms
• Pair with product engineering teams to design and ship fixes, not just file findings
• Review authorization models, privilege management, identity integrations, and operational access controls
• Support incident response, vulnerability management, and security investigations
• Support client audits, RFPs, security workshops, and regulatory discussions
• Translate regulatory and compliance requirements into practical technical controls
• Monitor security news and trends to identify potential impact on products and ensure timely corrective actions

What you bring

• Master or PhD in Computer Science, IT Security Engineering, or Cryptography
• 7+ years in application security, product security, offensive security, or security engineering
• Background in security-critical environments such as financial services, payments, identity, custody, embedded systems, or regulated platforms
• Fluent written and spoken English
• Strong security code review experience in at least two of: Go, C/C++, TypeScript, Python
• Expertise in threat modeling, secure design reviews, and penetration testing; ability to identify business logic flaws, authorization issues, cryptographic misuse, and complex attack paths
• Strong applied-cryptography foundation: PKI, TLS, X.509; AES, RSA, ECDSA, EdDSA; key management and key ceremonies; secure key storage and signing workflows
• Experience with HSM technologies and PKCS#11 environments
• Strong Kubernetes and container security experience
• Familiarity with cloud IAM, workload identity, secrets management, and policy-as-code
• A builder's mindset: you implement security controls, not only review them
• Comfort engaging security teams, auditors, regulators, enterprise clients, and prospect CISOs; ability to explain complex security topics clearly and pragmatically

Nice to have

• Experience with one or more of: Thales / Luna HSM, AWS CloudHSM, Azure Managed HSM, Intel SGX, AMD SEV-SNP, AWS Nitro Enclaves, Azure Confidential Computing
• Blockchain and smart contract security
• MPC and threshold signature systems
• Fuzzing and secure software testing
• Security compliance and regulatory frameworks (FINMA, DORA, MiCA, ISO 27001, SOC 2, FIPS 140-3)
• Public security research, CVEs, bug bounty experience, or open-source security contributions
• Experience supporting RFPs, security questionnaires, and customer due diligence

What we offer

• An opportunity to work at the intersection of digital assets and finance
• A skilled and experienced team, including world-renowned experts
• A learning-focused environment with entrepreneurial and team spirit
• Hybrid remote work and flexible working hours
• State-of-the-art technology and IT infrastructure
• Team events
• Target start date: Q1 2027

About Taurus

Taurus is a FINMA-regulated securities firm headquartered in Geneva, Switzerland. The company provides digital asset trading and financial services to clients and is a world-leading provider of digital asset infrastructure solutions to banks, corporations, and private companies. Using blockchain technology, the Taurus platform covers cryptocurrencies, tokenized securities, tokenized assets such as NFTs, digital currencies, and stablecoins.