Senior Vice President, Blockchain Security Engineer

About the role

We’re seeking a future team member for the role of Senior Blockchain Security Engineer to join our Digital Asset Security team. This role is located in New York.

Responsibilities

• Facilitate and participate in discussions of emerging security standards, current state, and emerging risk to our Digital Asset strategy.
• Contribute to the development and implementation of security architecture, standards, procedures, and guidelines for Digital Asset security.
• Conduct threat modeling exercises across the Digital Asset environment and advise technology, business, and infrastructure teams on security best practices and guidelines for Digital Asset security.
• Perform secure code review audits for smart contracts and traditional web2 Digital Asset applications.
• Advisory on the design and implementation of Digital Asset solutions.
• Review and analyze security assessments to provide insights, conclusions, and actionable recommendations.
• Recommend course of action to mitigate risk and ensure that appropriate standards are established and published.
• Stay current with the latest trends and best practices in blockchain security.

Requirements

• Bachelor's degree in computer science or a related discipline, or equivalent work experience required, advanced degree preferred.
• 10+ years of experience in information security or related technology experience required, experience in the securities or financial services industry is a plus.
• 5 years in financial enterprise security with 3 years on digital asset and blockchain technology required.
• Strong understanding of blockchain technology and DeFi use cases.
• Experience with smart contract development and security auditing (Solidity).
• Enterprise software development and security engineering experience.
• Familiarity with cryptography and public key infrastructure.
• Key management and wallet best practices specific to digital asset use cases.
• Securing multi-party computation (MPC/SMPC,) cryptographic protocols, key management and protection systems, techniques and processes.
• Threat Modeling experience along with Red/Blue/Purple team familiarity.
• Blockchain, cryptocurrency forensics, cloud security, secure deployment pipelines, and infrastructure as code security.
• Systems Security (security architecture, application security, database security, network security, mobile security, cloud security, data center security, defensive development, SSDLC (secure software development life cycle), static code analysis, dynamic code analysis, system analysis).
• Enterprise Security (compliance, security strategy and tactics, physical security, security awareness training, threat and risk assessment, forensics, proactive and reactive corporate security programs).
• Physical and operational security design.
• Business continuity and disaster recovery for digital assets.
• Cyber engineering, attack and malware analysis, security intelligence and research.
• Design custodial applications for digital assets.

Qualifications

• Experience with smart contract development and security auditing (Solidity).
• Enterprise software development and security engineering experience.
• Familiarity with cryptography and public key infrastructure.
• Key management and wallet best practices specific to digital asset use cases.
• Securing multi-party computation (MPC/SMPC,) cryptographic protocols, key management and protection systems, techniques and processes.
• Threat Modeling experience along with Red/Blue/Purple team familiarity.
• Blockchain, cryptocurrency forensics, cloud security, secure deployment pipelines, and infrastructure as code security.
• Systems Security (security architecture, application security, database security, network security, mobile security, cloud security, data center security, defensive development, SSDLC (secure software development life cycle), static code analysis, dynamic code analysis, system analysis).
• Enterprise Security (compliance, security strategy and tactics, physical security, security awareness training, threat and risk assessment, forensics, proactive and reactive corporate security programs).
• Physical and operational security design.
• Business continuity and disaster recovery for digital assets.
• Cyber engineering, attack and malware analysis, security intelligence and research.
• Design custodial applications for digital assets.

Skills

• Strong understanding of blockchain technology and DeFi use cases.
• Enterprise software development and security engineering experience.
• Familiarity with cryptography and public key infrastructure.
• Key management and wallet best practices specific to digital asset use cases.
• Securing multi-party computation (MPC/SMPC,) cryptographic protocols, key management and protection systems, techniques and processes.
• Threat Modeling experience along with Red/Blue/Purple team familiarity.
• Blockchain, cryptocurrency forensics, cloud security, secure deployment pipelines, and infrastructure as code security.
• Systems Security (security architecture, application security, database security, network security, mobile security, cloud security, data center security, defensive development, SSDLC (secure software development life cycle), static code analysis, dynamic code analysis, system analysis).
• Enterprise Security (compliance, security strategy and tactics, physical security, security awareness training, threat and risk assessment, forensics, proactive and reactive corporate security programs).
• Physical and operational security design.
• Business continuity and disaster recovery for digital assets.
• Cyber engineering, attack and malware analysis, security intelligence and research.
• Design custodial applications for digital assets.

Benefits

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

Pay

The expected base salary for this position when employment commences can be found in the Job Info section at the bottom of the posting. Base salary offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. Base salary is only part of the total rewards package, which may include eligibility for an annual discretionary incentive award.

Schedule

Details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, the employee will be in an “at will” position and the Company reserves the right to modify base salary (as well as any other discretionary payments or compensation programs) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.