Consultant Conversion - Associate, Cybersecurity Eng III

Morgan Stanley•Montreal, QC

About The Position

This role focuses on being the data security architecture lead for digital assets, with a strong emphasis on cryptography, Hardware Security Modules (HSMs), Multi-Party Computation (MPC), and digital signatures. The position involves participating in security reviews for vendors involved with digital assets, ensuring policy alignment, and identifying security gaps. The role also includes defining vendor-agnostic architecture, establishing risk-based policies for the technology stack, and designing secure cold wallet storage solutions, including air-gapped vault designs.

Requirements

5+ years of cybersecurity, cryptography, security architecture, or infrastructure security experience.
Strong understanding of public/private key cryptography, digital signatures, certificate management, and key lifecycle management.
Experience designing or securing systems that leverage HSMs, PKI, MPC, secrets management platforms, or equivalent technologies.
Experience conducting security architecture reviews and threat assessments.
Strong analytical and problem-solving skills.
Ability to communicate complex technical concepts to diverse stakeholders.

Responsibilities

Serve as the data security architecture lead for digital assets, focusing on cryptography, HSMs, MPC, and digital signatures.
Participate in security reviews of vendors for digital assets.
Provide cryptographic review of vendors.
Ensure policy alignment on vendor workflows, infrastructure, and security of cryptographic materials.
Identify security gaps in vendor processes, such as backup procedures for root key material.
Provide engineering design to correct process and workstream flaws.
Help define vendor-agnostic architecture, including the use of a centralized signing service.
Define a risk-based policy set for the digital asset technology stack.
Define a cold wallet storage solution, including air-gapped vault design.