Senior Vice President, Blockchain Security Engineer

BNY Mellon • New York, NY

2d • Onsite

About The Position

We’re seeking a future team member for the role of Senior Blockchain Security Engineer to join our Digital Asset Security team. This role is located in New York. In this role, you’ll make an impact in the following ways: Facilitate and participate in discussions of emerging security standards, current state, and emerging risk to our Digital Asset strategy. Contribute to the development and implementation of security architecture, standards, procedures, and guidelines for Digital Asset security. Conduct threat modeling exercises across the Digital Asset environment and advise technology, business, and infrastructure teams on security best practices and guidelines for Digital Asset security. Perform secure code review audits for smart contracts and traditional web2 Digital Asset applications. Advise on the design and implementation of Digital Asset solutions. Review and analyze security assessments to provide insights, conclusions, and actionable recommendations. Recommend course of action to mitigate risk and ensure that appropriate standards are established and published. Stay current with the latest trends and best practices in blockchain security.

Requirements

• Bachelor's degree in computer science or a related discipline, or equivalent work experience required, advanced degree preferred.
• 10+ years of experience in information security or related technology experience required, experience in the securities or financial services industry is a plus.
• 5 years in financial enterprise security with 3 years on digital asset and blockchain technology required.
• Strong understanding of blockchain technology and DeFi use cases.
• Experience with smart contract development and security auditing (Solidity).
• Enterprise software development and security engineering experience.
• Familiarity with cryptography and public key infrastructure.
• Key management and wallet best practices specific to digital asset use cases.
• Securing multi-party computation (MPC/SMPC,) cryptographic protocols, key management and protection systems, techniques and processes.
• Threat Modeling experience along with Red/Blue/Purple team familiarity.
• Blockchain, cryptocurrency forensics, cloud security, secure deployment pipelines, and infrastructure as code security.
• Systems Security (security architecture, application security, database security, network security, mobile security, cloud security, data center security, defensive development, SSDLC (secure software development life cycle), static code analysis, dynamic code analysis, system analysis).
• Enterprise Security (compliance, security strategy and tactics, physical security, security awareness training, threat and risk assessment, forensics, proactive and reactive corporate security programs).
• Physical and operational security design.
• Business continuity and disaster recovery for digital assets.
• Cyber engineering, attack and malware analysis, security intelligence and research.
• Design custodial applications for digital assets.

Nice To Haves

• experience in the securities or financial services industry is a plus.

Responsibilities

• Facilitate and participate in discussions of emerging security standards, current state, and emerging risk to our Digital Asset strategy.
• Contribute to the development and implementation of security architecture, standards, procedures, and guidelines for Digital Asset security.
• Conduct threat modeling exercises across the Digital Asset environment and advise technology, business, and infrastructure teams on security best practices and guidelines for Digital Asset security.
• Perform secure code review audits for smart contracts and traditional web2 Digital Asset applications.
• Advise on the design and implementation of Digital Asset solutions.
• Review and analyze security assessments to provide insights, conclusions, and actionable recommendations.
• Recommend course of action to mitigate risk and ensure that appropriate standards are established and published.
• Stay current with the latest trends and best practices in blockchain security.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior