Senior Product Security Engineer / Architect (Fintech)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Senior Product Security Engineer / Architect (Fintech): Developing and securing digital asset infrastructure for a FINMA-regulated securities firm with an accent on cryptographic systems, HSM integrations, and secure key management. Focus on threat modeling, performing security reviews of application code and smart contracts, and building automated security guardrails in CI/CD pipelines.
Location: Hybrid (Lausanne, Switzerland)
Company
is a FINMA-regulated securities firm providing digital asset trading, financial services, and blockchain-based infrastructure for banks and corporations.
What you will do
- Own product security for the -PROTECT, CAPITAL, EXPLORER, and NETWORK digital asset products.
- Design security architecture for HSMs, confidential computing, MPC, and cryptographic systems.
- Perform security reviews of application code, cryptographic workflows, and smart contracts.
- Model threats for new features, lead penetration tests, and validate remediation plans.
- Build and maintain security automation across CI/CD pipelines, Kubernetes environments, and deployment platforms.
- Collaborate with engineering teams to implement security controls and support regulatory audits and compliance.
Requirements
- Master's or PhD in Computer Science, IT Security Engineering, or Cryptography.
- 7+ years of experience in application, product, or offensive security engineering.
- Strong security code review experience in at least two of: Go, C/C++, TypeScript, or Python.
- Deep foundation in applied cryptography (PKI, TLS, X.509, AES, RSA, ECDSA, EdDSA) and HSM technologies.
- Strong experience with Kubernetes and container security, cloud IAM, and secrets management.
- Fluent written and spoken English.
Nice to have
- Expertise in blockchain and smart contract security.
- Knowledge of MPC and threshold signature systems.
- Experience with security frameworks like FINMA, DORA, MiCA, ISO 27001, or SOC 2.
- Public security research, CVEs, or open-source security contributions.
- Experience supporting RFPs and customer security due diligence.
Culture & Benefits
- Work at the intersection of digital assets and traditional finance with a team of world-renowned experts.
- Entrepreneurial, fast-paced learning environment with significant growth opportunities.
- Hybrid remote work model and flexible working hours.
- Access to state-of-the-art technology and IT infrastructure.
- Regular fun team events.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →