Principal Security Architect – On-Chain, Digital Assets

Job not on LinkedIn

🔥 2 minutes ago

🇭🇰 Hong Kong – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

BTSE

WebsiteLinkedInAll Job Openings

51 - 200 employees

💳 Fintech

💸 Finance

🛍️ eCommerce

💰 Series A on 2020-12

Fintech • Finance • eCommerce

BTSE is a leading digital asset exchange that offers a simple and secure way to trade cryptocurrencies. As the go-to exchange for all things crypto, BTSE is one of the top trusted crypto platforms for institutions, retail users and first-time traders. BTSE has developed multiple trading technologies that have been adopted across the industry, setting new standards for excellence and innovation in the world of digital asset trading. Additionally, BTSE licenses its industry-leading technology to exchanges worldwide through its white label exchange solutions, strengthening the BTSE ecosystem and bridging traditional finance with digital assets everywhere.

📋 Description

• Lead end-to-end security architecture for the full custody stack, including HSM/MPC key management, transaction authorization, signing quorums, address whitelisting, hot/cold wallet segregation, key ceremonies, delegated cold custodians, and secure staking deposit/withdrawal paths • Establish crypto-specific baseline standards, privileged-access controls, and secure SDLC requirements within a multi-account AWS environment, partnering with central InfraSec, AppSec, and IAM teams • Define custody and blockchain detection use cases for the SOC and manage incident response procedures for crypto-specific scenarios, including key compromise, unauthorized transactions, and on-chain incidents • Conduct threat modeling and security reviews across internal ledger mechanics, balance idempotency, withdrawal sequencing, and smart contract integrations to ensure transaction money-path integrity • Direct security assessments and ongoing assurance for external custody providers, execution systems, blockchain analytics, Travel Rule tools, and treasury integrations • Own control mapping against international regulatory standards, including MiCA, DORA, FCA, and MAS, and collaborate with Global Market Teams during international expansion • Report into the central security function and work closely with risk, compliance, product, and engineering teams on spot trading, custody, staking, and on-chain services

🎯 Requirements

• 10+ years in information security, with a proven track record as a security architect or technical lead securing digital-asset custody, high-throughput crypto platforms, or regulated financial infrastructure • Direct operational experience securing crypto custody, with deep domain expertise in wallet architecture, Multi-Party Computation (MPC), Hardware Security Modules (HSMs), key ceremonies, and signing-policy design • Strong cloud security fundamentals (AWS preferred) in a regulated environment, with practical experience mapping security controls to licensing conditions (ISO 27001, SOC 2, NIST) • Demonstrated experience running threat modeling, risk assessments, and incident response, with the ability to translate technical cryptographic risk into clear business and regulatory impact for non-security teams and regulators • Proven comfort operating in a matrixed security model, collaborating with dedicated IAM, AppSec, SOC, and infrastructure security teams rather than owning those central functions outright • Nice-to-have: Hands-on experience with Kubernetes, containers, Infrastructure as Code (Terraform), API security, Python for automation, Web3 dependency supply-chain assurance, or industry certifications (CISSP, CISM, CCSP, CCSSA) • Nice-to-have: Professional fluency in spoken and written Mandarin

🏖️ Benefits

• Competitive compensation package • Various team-building programs and company events