Bitcoin Security Engineer
MicroStrategy2 months ago
Base Salary
$104k - $187k/yr
Responsibilities
- Plan and execute penetration tests against single-signature, multisignature, MPC, and hardware-wallet architectures, including key generation, storage, backup, and recovery workflows.
- Design and run red-team simulations of signing ceremonies, quorum policies, transaction approvals, insider threats, social engineering, collusion, and operational-security failures.
- Test hardware wallets, HSMs, secure elements, and air-gapped devices through firmware analysis, fault-injection research, side-channel research, entropy and RNG validation, and supply-chain tamper assessment.
- Assess Bitcoin nodes, RPC and transaction-construction surfaces, PSBT handling, fee and RBF logic, transaction malleability, address generation, derivation paths, P2P, and mempool attack surfaces.
- Evaluate blockchain-adjacent infrastructure including smart contracts, tokenization platforms, bridges, oracles, and on-chain settlement logic.
- Research and pressure-test the security claims, key management, segregation, access controls, and recovery processes of custodians, exchanges, and asset servicers.
- Build threat models and attack-surface inventories for the end-to-end bitcoin custody chain and prioritize findings by adversary capability and financial impact.
- Produce reproducible penetration-test reports with proof-of-concept exploits, severity ratings, remediation guidance, and retesting support.
- Conduct original research into bitcoin, cryptography, and blockchain vulnerabilities and responsibly disclose findings.
- Develop custom tooling, harnesses, fuzzers, and test automation for scalable bitcoin and custody security testing.
Requirements
- Bachelor's degree in Computer Science, Cryptography, Information Security, Engineering, or a related field; a master's degree is strongly preferred.
- 6+ years of hands-on penetration testing, red-team, vulnerability research, or exploit-development experience, with substantial exposure to cryptographic, financial, blockchain, or bitcoin environments.
- Hands-on ability to test Bitcoin protocols, wallets, nodes, key management, multisignature and MPC schemes, PSBT, transaction construction, derivation paths, and on-chain and off-chain attack surfaces.
- Deep understanding of digital signatures, hashing, key generation, entropy sources, secure key storage, hardware-backed security mechanisms, and cryptographic protocol failures in real deployments.
- Experience assessing Bitcoin custody solutions, multisignature and hardware wallets, HSMs, recovery mechanisms, signing ceremonies, and operational-security controls.
- Ability to conduct and document original security research, threat analysis, and technical due diligence of custodians, cryptographic systems, and blockchain systems.
- Proficiency in one or more of Python, Rust, C/C++, or Go for custom tooling, fuzzers, and proof-of-concept exploits.
- One or more recognized offensive-security or blockchain-security credentials is strongly preferred, including OSCP, OSEP, OSED, GPEN, GXPN, GWAPT, GREM, CRTO, CRTL, or Certified Blockchain Security Professional.
- Strong written and verbal communication skills for translating technical findings into actionable guidance for technical and non-technical stakeholders.
- Senior individual-contributor experience, high autonomy, sound judgment, and the ability to handle sensitive systems safely, ethically, and within authorized scope.
Benefits
- Full-time, in-person work from Strategy's office in Tysons Corner, Virginia.
- Eligible employees may participate in bonus programs, sales incentives, equity awards, and comprehensive benefits, as applicable.
About MicroStrategy
We provide cloud-native, AI-powered enterprise analytics software to thousands of global customers, and leverage 35+ years of software expertise to explore innovation in Bitcoin applications. We believe the combination of our operating structure, Bitcoin strategy, and focus on technology innovation provides a unique opportunity for value creation. We rebranded from MicroStrategy to Strategy in February 2025. Follow our new LinkedIn Company Page at https://www.linkedin.com/company/strategy