Principal Security Architect (On-Chain security & Custody)
At a glance
Senior Security Engineering role at BTSE. Remote, Hong Kong · full-time.
Pay not stated Security Architect salary
remoteroles summary, based on the employer's posting.
What you'll do
- Set security architecture for custody, covering key storage, transaction approval, wallet separation, signing procedures and staking flows
- Define crypto security standards and access controls for the AWS environment, coordinating delivery with central security teams
- Build crypto-focused detection and incident response procedures for key compromise, unauthorized transactions and on-chain events
- Review ledger processes, withdrawals and smart contract integrations to protect transaction integrity
- Assess custody, execution, analytics and treasury vendors, and map controls to regulatory standards across markets
What you bring
- At least ten years in information security, including security architecture or technical leadership for digital assets or regulated financial systems
- Hands-on custody security work, with deep knowledge of wallet design, MPC, HSMs, key ceremonies and signing policies
- Strong cloud security experience in regulated settings, plus practical control mapping to licensing requirements
- You have led threat modeling, risk reviews and incident response, and can explain cryptographic risks to business and regulatory audiences
- You can work across IAM, AppSec, SOC and infrastructure security teams without taking over their central responsibilities
Who this fits
This is a hands-on principal-level role for someone who has secured crypto custody or high-throughput digital-asset platforms. You’ll partner across security, risk, compliance, product and engineering while owning custody and on-chain security end to end. The role is remote in Hong Kong.
From the employer
About the Opportunity:
We are looking for a Principal Security Architect with deep crypto domain expertise to own security for the custody and on-chain layer of our regulated digital-asset platform end to end, spanning architecture, engineering, operations and regulatory assurance. Reporting into the central security function, you will define crypto-specific requirements and partner with dedicated InfraSec, AppSec, IAM and SOC teams on the platform capabilities they already own, rather than duplicating those functions. You will work closely with risk, compliance, product and engineering as we build out spot trading, custody, staking and on-chain services. This is a hands-on senior role for someone who understands that in digital-asset custody a single key-management failure is a firm-ending event, and who builds controls accordingly.
Responsibilities
- Lead end-to-end security architecture for the full custody stack: HSM/MPC key management, transaction authorization, signing quorums, address whitelisting, hot/cold wallet segregation, key ceremonies, delegated cold custodians, and secure staking deposit/withdrawal paths.
- Establish crypto-specific baseline standards, privileged-access controls, and secure SDLC requirements within our multi-account AWS environment, partnering with central InfraSec, AppSec, and IAM teams on delivery.
- Define custody and blockchain detection use cases for the SOC, and directly manage incident response procedures for crypto-specific scenarios (key compromise, unauthorized transactions, on-chain incidents) alongside Corporate Security.
- Conduct rigorous threat modeling and security reviews across internal ledger mechanics, balance idempotency, withdrawal sequencing, and smart contract integrations to guarantee transaction money-path integrity.
- Direct security assessments and ongoing assurance for external custody providers, execution systems, blockchain analytics, Travel Rule tools, and treasury integrations using group vendor security processes.
- Own control mapping against international regulatory standards (MiCA, DORA, FCA, MAS) and collaborate with Global Market Teams to maintain compliance during international expansion.
Requirement
- 10+ years in information security, with a proven track record as a security architect or technical lead securing digital-asset custody, high-throughput crypto platforms, or regulated financial infrastructure.
- Direct operational experience securing crypto custody, with deep domain expertise in wallet architecture, Multi-Party Computation (MPC), Hardware Security Modules (HSMs), key ceremonies, and signing-policy design.
- Strong cloud security fundamentals (AWS preferred) in a regulated environment, with practical experience mapping security controls to licensing conditions (ISO 27001, SOC 2, NIST).
- Demonstrated experience running threat modeling, risk assessments, and incident response, with the ability to translate technical cryptographic risk into clear business and regulatory impact for non-security teams and regulators.
- Proven comfort operating in a matrixed security model, collaborating with dedicated IAM, AppSec, SOC, and infrastructure security teams rather than owning those central functions outright.
Nice-to-Haves
-
Hands-on experience with Kubernetes, containers, Infrastructure as Code (Terraform), API security, Python for automation, Web3 dependency supply-chain assurance, or industry certifications (CISSP, CISM, CCSP, CCSSA).
-
Professional fluency in spoken and written Mandarin to support regional market operations and cross-functional engineering collaboration.
Perks & Benefits
- Competitive compensation package
- Various team-building programs and company events
- And many more! Apply and let us tell you more!
Security Engineering work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security EngineeringRemote
Find me workBy the team behind remoteroles.