Senior Product Security Engineer – Architect

• Own product security for all applicable digital asset products: Taurus-PROTECT, Taurus-CAPITAL, Taurus-EXPLORER and Taurus-NETWORK
• Contribute to financial services product security
• Contribute to security architecture for HSMs, confidential computing, MPC, and cryptographic systems
• Perform security reviews of application code, cryptographic workflows, smart contracts, HSM integrations, and enclave-based components
• Model threats of new features and review architectural designs before release
• Lead and review penetration tests, reproduce findings, and validate remediation plans
• Build and own automation enforcing security guardrails across CI/CD pipelines, software supply chains, Kubernetes environments, and deployment platforms
• Pair with product engineering teams to design and ship fixes
• Review authorization models, privilege management, identity integrations, and operational access controls
• Support incident response, vulnerability management, and security investigations
• Support client audits, RFPs, security workshops, and regulatory discussions
• Translate regulatory and compliance requirements into practical technical controls
• Monitor security news and trends, identify potential product impact, and ensure timely corrective actions
• Work as a hands‑on individual contributor and security partner to engineering teams

Requirements

• Master or Ph D in computer sciences, IT security engineering or cryptography
• 7+ years in application security, product security, offensive security, or security engineering
• Background in security‑critical environments — financial services, payments, identity, custody, embedded systems, or regulated platforms
• Fluent written and spoken English
• Strong security code review experience in at least two of: Go, C/C++, Type Script, Python
• Threat modeling, secure design reviews, and penetration testing
• Ability to identify business logic flaws, authorization issues, cryptographic misuse, and complex attack paths
• Strong applied‑cryptography foundation: PKI, TLS, X.509; AES, RSA, ECDSA, Ed DSA; key management and key ceremonies; secure key storage and signing workflows
• Experience with HSM technologies and PKCS#11 environments
• Strong Kubernetes and container security experience
• Familiarity with cloud IAM, workload identity, secrets management, and policy‑as‑code
• A builder’s mindset — implement security controls, not only review them
• Experience with one or more of: Thales / Luna HSM, AWS Cloud HSM, Azure Managed HSM, Intel SGX, AMD SEV‑SNP, AWS Nitro Enclaves, Azure Confidential Computing
• Comfortable engaging security teams, auditors, regulators, enterprise clients, and prospect CISOs
• Able to explain complex security topics clearly and pragmatically
• Strong plus: blockchain and smart contract security
• Strong plus: MPC and threshold signature systems
• Strong plus: fuzzing and secure software testing
• Strong plus: security compliance and regulatory frameworks (FINMA, DORA, Mi CA, ISO 27001, SOC 2, FIPS 140-3)
• Strong plus: public security research, CVEs, bug bounty experience, or open‑source security contributions
• Strong plus: experience supporting RFPs, security questionnaires, and customer due diligence
• Degree in Computer Science, Security, or equivalent practical experience
• Core Competencies

Demonstrates expertise in product security, application security, and offensive security within financial services and regulated environments.

Proficient in threat modeling, security code reviews, and implementing security controls across various technologies and platforms.

• Highest‑signal resume keywords
• Application Security
• Threat Modeling
• Security Code Review
• Kubernetes Security
• HSM Technologies
• ATS Optimization Keywords
• Hard Skills
• Go
• C/C++
• Type Script
• Python
• PKI
• TLS
• AES
• RSA
• ECDSA
• Soft Skills
• Clear Communication
• Collaboration
• Problem‑Solving

Certifications & Qualifications

• Master's Degree in Computer Science
• Ph D in IT Security Engineering
• Ph D in Cryptography
• Industry Keywords
• Financial Services
• Payments
• Identity
• Custody
• Regulated Platforms
• Security Compliance
• Regulatory Frameworks
• Tools & Technologies
• HSM
• AWS Cloud HSM
• Azure Managed HSM
• Intel SGX
• AWS Nitro Enclaves
• Azure Confidential Computing
• #J-18808-Ljbffr