Senior Blockchain Security Engineer

$113,000 - $246,000/Yr

Bn'Y - New York, NY

Full-time - Senior

New York, NY

10,001+ employees

Real Estate

About the position

The Senior Blockchain Security Engineer at BNY will play a crucial role in enhancing the security of digital assets within the Information Security Division. This position involves developing and implementing security architecture, conducting threat modeling, performing secure code reviews, and advising on best practices for digital asset security. The engineer will also stay updated on the latest trends in blockchain security to ensure the organization's digital asset strategy is robust and secure.

Responsibilities

• Facilitate and participate in discussions of emerging security standards and risks to the Digital Asset strategy.
• Contribute to the development and implementation of security architecture, standards, procedures, and guidelines for Digital Asset security.
• Conduct threat modeling exercises across the Digital Asset environment and advise teams on security best practices.
• Perform secure code review audits for smart contracts and traditional web2 Digital Asset applications.
• Advise on the design and implementation of Digital Asset solutions.
• Review and analyze security assessments to provide insights and actionable recommendations.
• Recommend actions to mitigate risk and ensure appropriate standards are established and published.
• Stay current with the latest trends and best practices in blockchain security.

Requirements

• Bachelor's degree in computer science or a related discipline, or equivalent work experience required; advanced degree preferred.
• 10+ years of experience in information security or related technology experience required; experience in the securities or financial services industry is a plus.
• 5+ years in financial enterprise security with 3+ years on digital asset and blockchain technology required.

Nice-to-haves

• Strong understanding of blockchain technology and DeFi use cases.
• Experience with smart contract development and security auditing (Solidity).
• Enterprise software development and security engineering experience.
• Familiarity with cryptography and public key infrastructure.
• Key management and wallet best practices specific to digital asset use cases.
• Securing multi-party computation (MPC/SMPC) and cryptographic protocols.
• Threat Modeling experience along with Red/Blue/Purple team familiarity.
• Blockchain, cryptocurrency forensics, cloud security, secure deployment pipelines, and infrastructure as code security.
• Systems Security experience including security architecture, application security, database security, and more.
• Enterprise Security experience including compliance, security strategy, and physical security.

Benefits

• Highly competitive compensation
• Generous paid leaves including paid volunteer time
• Access to flexible global resources and tools for personal and professional growth
• Health and wellness programs
• Financial goal support through various company-sponsored benefit programs