Director, Cyber Security Engineer

BNY Mellon•New York, NY

2d•Onsite

About The Position

We’re seeking a future team member for the role of Director, Cyber Security Engineer to join our Digital Assets Technology team. This role is located in New York, NY. In this role, you’ll make an impact by collaborating with Cryptographers to build a highly secure and resilient crypto and tokenized assets custody solution. You will implement and audit cryptographic code using secure coding practices in C/C++, Go, or Rust, ensuring resistance to known security attacks such as side-channel attacks. You will perform threat modeling to anticipate and mitigate potential attack vectors, conduct crypto security-focused code reviews, and design tests for vulnerabilities. You will also integrate with blockchain nodes/APIs, understand blockchain transaction formats, and develop secure storage and networking solutions to support crypto custody infrastructure.

Requirements

Bachelor’s degree in computer science, Engineering, or a related field (or equivalent experience).
12+ years of experience in high volume/low latency systems and platform ownership
Proven expertise in secure software development and cryptography engineering, including experience with cryptographic protocols and common security pitfalls.
Proficiency in secure coding practices with C/C++, Go, or Rust, and familiarity with cryptographic libraries such as OpenSSL or MPC-specific libraries.
Strong knowledge of hardware security features like Intel SGX, HSMs, and experience working with Trusted Execution Environments including remote attestation.
Experience with blockchain technologies, including transaction formats (Bitcoin UTXOs, Ethereum RLP) and integration with blockchain nodes/APIs.
Solid understanding of secure storage, databases, networking (sockets, RPC frameworks), concurrency control, cloud security, and containerization for deployment.

Responsibilities

Collaborate with Cryptographers to build a highly secure and resilient crypto and tokenized assets custody solution.
Implement and audit cryptographic code using secure coding practices in C/C++, Go, or Rust, ensuring resistance to known security attacks such as side-channel attacks.
Perform threat modeling to anticipate and mitigate potential attack vectors, conduct crypto security-focused code reviews, and design tests for vulnerabilities.
Integrate with blockchain nodes/APIs, understand blockchain transaction formats, and develop secure storage and networking solutions to support crypto custody infrastructure.