Senior Security Engineer, Digital Assets

Charles Schwab Inc.•Southlake, TX

7d•$105,600 - $215,000•Onsite

About The Position

We are hiring a Senior Engineer, Crypto Security to help design, build, and secure Schwab’s institutional‑grade digital asset custody platforms. This is a hands‑on engineering role focused on crypto‑native security capabilities and digital asset development, including secure wallet technologies, key management, cryptographic protocols, smart contract security, tokenization, custody policy enforcement, and advanced blockchain security solutions. The role partners closely with the Digital Assets engineering team to ensure custody platforms and other digital asset services are secure by design, resilient to failure, and aligned with Schwab’s risk, governance, and regulatory standards.

Requirements

7+ years of software engineering experience with strong focus on security or cryptography.
Hands‑on experience with secure wallet technologies and key management systems (MPC, HSMs, or equivalent).
Strong understanding of cryptographic primitives, secure protocol design, and distributed systems.
Experience building systems where security failures have material impact.
Ability to collaborate effectively across engineering, security, and risk teams.
Experience with Web3 Security tooling with Slither, Mythril, Foundry Fuzzing
Experience with common cryptography implementation languages such as C, C++, Rust, Go.
Experience with collaborating with security auditors, ie: Trail of bits, halborn,
Experience with implementing, and auditing secure, cross-chain bridges and interoperability protocols (e.g., lock-and-mint, burn-and-mint, atomic swaps) to facilitate asset and data movement between networks.

Nice To Haves

Experience with crypto custody platforms, digital assets, or blockchain infrastructure.
Hands‑on work with ZKPs, DID frameworks, DeFi protocols, or CBDC‑related systems.
Experience implementing policy‑driven transaction controls in high‑risk systems.
Strong security intuition and ability to reason through complex threat models.
Experience using AI tools to support secure software development.

Responsibilities

Contribute to the design and implementation of secure wallet solutions, including Multi‑Party Computation (MPC), Hardware Security Modules (HSMs), Cold, warm, and hot wallet architectures, and Custodial vs. non‑custodial control models.
Implement distributed key generation and signing workflows that eliminate single points of failure.
Ensure secure handling of key lifecycle events—generation, storage, usage, rotation, and recovery.
Work closely with Custody Leads to validate cryptographic assumptions and architectural choices.
Design and implement security‑critical components leveraging modern cryptographic protocols, DeFi application security principles, and Cross‑chain and blockchain interoperability patterns.
Participate in evaluating and integrating advanced technologies such as Zero‑Knowledge Proofs (ZKPs), Decentralized Identity (DID) frameworks, and Central Bank Digital Currency (CBDC) architectures (as applicable).
Ensure cryptographic designs are auditable, explainable, and production‑ready.
Build and configure programmable custody policy engines, including Multi‑approval and quorum‑based workflows, Spending thresholds and velocity limits, and Role‑based access controls and segregation of duties.
Translate risk, compliance, and business rules into deterministic, testable technical policies.
Ensure policies are observable, enforceable, and version‑controlled.
Identify potential vulnerabilities, failure modes, or misconfigurations early.
Support security reviews, threat modeling, and architecture assessments.
Contribute to incident analysis and remediation related to custody or blockchain security events.
Evaluate and assess blockchain architectures, protocols, and ecosystems for enterprise suitability.
Design and review smart‑contract frameworks and tokenization approaches, including Tokenized securities, Stablecoins, and Asset representations using ERC‑20, ERC‑721, ERC‑1155, and related standards.
Assess emerging token lifecycle, settlement, and secure on‑chain governance models for applicability to Schwab’s business.
Leverage GenAI and agentic AI tools to accelerate threat modeling, cryptographic design reviews, and documentation and validation.
Apply AI to enhance speed and rigor without compromising correctness or security.
Develop backend services to support custody, tokenization.
Analyzing and developing secure smart contracts workflows for tokenization, stable coins.
This role materially strengthens Schwab’s digital asset security posture.