Principal Security Engineer

DFNS is the core banking platform for digital assets, and they are seeking a Principal Security Engineer to lead product security across the platform. The role involves embedding security into the architecture, analyzing key management and transaction workflows, and designing new security capabilities.

Responsibilities:

• Lead product security architecture across the platform, ensuring security is embedded into core system design
• Analyze and secure the platform's key management, signing workflows, and transaction pipelines
• Conduct system-level threat modeling for new features, protocols, and blockchain integrations
• Design and review security-sensitive components such as auth systems, authorization models, and cryptographic workflows
• Define and implement defense-in-depth controls across application, infrastructure, and protocol layers
• Own and expand software supply-chain security, from dependency scanning in CI to package scanning on developer laptops
• Drive infrastructure and security configuration into version-controlled code in GitHub to eliminate configuration drift
• Work with engineering teams to ensure secure design decisions during product development and architectural planning
• Investigate emerging risks across blockchain protocols, custody models, and cryptographic systems
• Support ongoing SOC 2, ISO, and certification work as the platform's control surface grows
• Support incident response and root-cause analysis for security-critical events
• Provide day-to-day security support to developers, making the secure path the easy path
• Represent DFNS in security architecture reviews with tier-one banks, auditors, and partners
• Contribute to security research and knowledge sharing through articles, talks, or technical publications

Requirements:

• 10+ years of experience in security engineering, product security, or security architecture
• Experience securing financial infrastructure or blockchain platforms, ideally both
• Strong understanding of cryptographic systems, wallet architectures, and key management models
• Experience performing system-level threat modeling and security architecture reviews
• Solid knowledge of distributed systems, networking protocols, and cloud infrastructure (AWS)
• Experience with software supply-chain security, package scanning, securing the dev environment end to end
• Experience managing security and infrastructure configuration as code, with an eye for drift prevention
• Familiarity with maintaining SOC 2, ISO 27001, ISO 22301, and related certifications in a live audit cycle
• Knowledge of industry security frameworks such as the NIST Cybersecurity Framework
• Strong understanding of authentication systems, authorization models, and applied cryptography
• Experience working with modern backend languages such as TypeScript or Rust
• Clear communicator able to translate complex security risks into practical engineering decisions
• Familiarity with MPC, threshold signatures, or HSM-backed key management is a strong advantage