We’re seeking a future team member for the role of Senior Blockchain Security Engineer to join our Digital Asset Security team. This role is located in New York.  

In this role, you’ll make an impact in the following ways: 

• Facilitate and participate in discussions of emerging security standards, current state, and emerging risk to our Digital Asset strategy.
• Contribute to the development and implementation of security architecture, standards, procedures, and guidelines for Digital Asset security.
• Conduct threat modeling exercises across the Digital Asset environment and advise technology, business, and infrastructure teams on security best practices and guidelines for Digital Asset security.
• Perform secure code review audits for smart contracts and traditional web2 Digital Asset applications.
• Advise on the design and implementation of Digital Asset solutions.
• Review and analyze security assessments to provide insights, conclusions, and actionable recommendations.
• Recommend course of action to mitigate risk and ensure that appropriate standards are established and published.
• Stay current with the latest trends and best practices in blockchain security.

To be successful in this role, we’re seeking the following: 

• Bachelor‘s degree in computer science or a related discipline, or equivalent work experience required, advanced degree preferred.

• 10+ years of experience in information security or related technology experience required, experience in the securities or financial services industry is a plus. 

• 5 years in financial enterprise security with 3 years on digital asset and blockchain technology required.

• Strong understanding of blockchain technology and DeFi use cases.

• Experience with smart contract development and security auditing (Solidity).

• Enterprise software development and security engineering experience.

• Familiarity with cryptography and public key infrastructure.

• Key management and wallet best practices specific to digital asset use cases.

• Securing multi-party computation (MPC/SMPC,) cryptographic protocols, key management and protection systems, techniques and processes.

• Threat Modeling experience along with Red/Blue/Purple team familiarity.

• Blockchain, cryptocurrency forensics, cloud security, secure deployment pipelines, and infrastructure as code security.

• Systems Security (security architecture, application security, database security, network security, mobile security, cloud security, data center security, defensive development, SSDLC (secure software development life cycle), static code analysis, dynamic code analysis, system analysis).

• Enterprise Security (compliance, security strategy and tactics, physical security, security awareness training, threat and risk assessment, forensics, proactive and reactive corporate security programs).

• Physical and operational security design.

• Business continuity and disaster recovery for digital assets.

• Cyber engineering, attack and malware analysis, security intelligence and research.

• Design custodial applications for digital assets.

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.