Principal Security Engineer

🕒 July 31

🌐 United States, Germany – Remote

🇺🇸 United States – Remote 🇩🇪 Germany – Remote

🏄 California, New York, +1 more states – Remote

🏄 California – Remote 🗽 New York – Remote 🤠 Texas – Remote

💵 $160k - $240k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

MLabs

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🤖 Artificial Intelligence

💳 Fintech

Consulting • Artificial Intelligence • Fintech

MLabs is a consultancy firm specializing in Haskell, Rust, Blockchain, and AI technologies. They assist clients in setting up project specifications, implementation, management, and maintenance of technical projects across various sectors. MLabs has expertise in functional programming, compilers, AI, DevOps, and full-stack development, focusing primarily on industries such as Fintech and Information Technology.

📋 Description

• Lead product security architecture, ensuring security principles are embedded into core platform design and development cycles. • Analyze and secure key management systems, transaction pipelines, and signing workflows across modern distributed networks. • Perform system-level threat modeling for new product features, protocols, and multi-chain integrations. • Design and evaluate security-sensitive components, including authentication protocols, authorization frameworks, and applied cryptographic workflows. • Define, implement, and maintain multi-layered security controls across the application, infrastructure, and protocol layers. • Own and expand end-to-end software supply-chain security, spanning dependency scanning in CI pipelines to local developer environments. • Enforce security configurations into version-controlled repositories to prevent configuration drift and enhance auditability. • Investigate emerging security risks related to blockchain protocols, institutional custody models, and novel cryptographic techniques. • Support ongoing SOC 2, ISO 27001, and ISO 22301 compliance frameworks alongside expanding control surfaces. • Provide day-to-day guidance to engineering teams to make secure patterns accessible, while supporting incident response and root-cause analysis when necessary. • Participate in security architecture reviews with tier-one banking partners, external auditors, and enterprise clients. • Contribute to technical research, whitepapers, and conference presentations to advance the digital asset security field.

🎯 Requirements

• 10+ years in security engineering, product security, or security architecture roles. • Demonstrated track record of securing financial infrastructure, institutional blockchain platforms, or both. • Deep understanding of cryptographic protocols, wallet architectures, and key management frameworks. Direct experience with Multi-Party Computation (MPC), threshold signatures, or HSM-backed solutions is strongly preferred. • Extensive experience performing comprehensive system-level threat models and architecture reviews. • Solid foundational knowledge of distributed systems, networking protocols, and cloud computing platforms (primarily AWS). • Hands-on experience implementing software supply-chain defenses and managing security configurations via code to prevent drift. • Familiarity with maintaining live audit cycles for frameworks such as SOC 2, ISO 27001, ISO 22301, and the NIST Cybersecurity Framework. • Professional familiarity with modern backend languages such as Rust or TypeScript. • Exceptional ability to communicate complex security concepts effectively to both internal engineering teams and external enterprise stakeholders.

🏖️ Benefits

• Competitive executive-level compensation package. • Flexible, remote-first work environment. • Comprehensive health, wellness, and benefits coverage tailored to regional standards. • Generous paid time off (PTO) and personal Leave policy. • Professional development budget for security research, certifications, and industry conferences. • Exposure to cutting-edge cryptographic engineering alongside leading global financial institutions.