Principal Security Engineer

MLabs • San Francisco, CA

1d • $160,000 - $240,000 • Remote

About The Position

Our client operates a core banking platform designed specifically for digital assets, enabling fintechs and systemically important financial institutions to build, operate, and scale onchain infrastructure. The platform secures over €100B in assets and powers critical operations—including key management, transaction processing, treasury, and compliance—for over 400 global institutions. Our client is seeking a Principal Security Engineer to lead product security across the entire ecosystem. In this role, security is built directly into the system's architecture rather than applied as a secondary control. The ideal candidate will take ownership of hardening key management, signing workflows, authentication systems, policy enforcement, and multi-chain integrations. Beyond core product security and vulnerability management, this position plays a pivotal role in shaping the long-term architectural vision of a platform trusted by tier-one financial institutions. As an organization committed to technical excellence, our client also encourages contribution to the broader security community through research, publications, and industry events.

Requirements

• 10+ years in security engineering, product security, or security architecture roles.
• Demonstrated track record of securing financial infrastructure, institutional blockchain platforms, or both.
• Deep understanding of cryptographic protocols, wallet architectures, and key management frameworks.
• Extensive experience performing comprehensive system-level threat models and architecture reviews.
• Solid foundational knowledge of distributed systems, networking protocols, and cloud computing platforms (primarily AWS).
• Hands-on experience implementing software supply-chain defenses and managing security configurations via code to prevent drift.
• Familiarity with maintaining live audit cycles for frameworks such as SOC 2, ISO 27001, ISO 22301, and the NIST Cybersecurity Framework.
• Professional familiarity with modern backend languages such as Rust or TypeScript.
• Exceptional ability to communicate complex security concepts effectively to both internal engineering teams and external enterprise stakeholders.

Nice To Haves

• Direct experience with Multi-Party Computation (MPC), threshold signatures, or HSM-backed solutions is strongly preferred.

Responsibilities

• Lead product security architecture, ensuring security principles are embedded into core platform design and development cycles.
• Analyze and secure key management systems, transaction pipelines, and signing workflows across modern distributed networks.
• Perform system-level threat modeling for new product features, protocols, and multi-chain integrations.
• Design and evaluate security-sensitive components, including authentication protocols, authorization frameworks, and applied cryptographic workflows.
• Define, implement, and maintain multi-layered security controls across the application, infrastructure, and protocol layers.
• Own and expand end-to-end software supply-chain security, spanning dependency scanning in CI pipelines to local developer environments.
• Enforce security configurations into version-controlled repositories to prevent configuration drift and enhance auditability.
• Investigate emerging security risks related to blockchain protocols, institutional custody models, and novel cryptographic techniques.
• Support ongoing SOC 2, ISO 27001, and ISO 22301 compliance frameworks alongside expanding control surfaces.
• Provide day-to-day guidance to engineering teams to make secure patterns accessible, while supporting incident response and root-cause analysis when necessary.
• Participate in security architecture reviews with tier-one banking partners, external auditors, and enterprise clients.
• Contribute to technical research, whitepapers, and conference presentations to advance the digital asset security field.

Benefits

• Competitive executive-level compensation package.
• Flexible, remote-first work environment.
• Comprehensive health, wellness, and benefits coverage tailored to regional standards.
• Generous paid time off (PTO) and personal Leave policy.
• Professional development budget for security research, certifications, and industry conferences.
• Exposure to cutting-edge cryptographic engineering alongside leading global financial institutions.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed