4 months ago
Lausanne, SwitzerlandSenior
Responsibilities
- Own product security for Taurus-PROTECT, Taurus-CAPITAL, Taurus-EXPLORER, Taurus-NETWORK, and applicable financial services products.
- Contribute to security architecture for HSMs, confidential computing, MPC, and cryptographic systems.
- Perform application-code, cryptographic-workflow, smart-contract, HSM-integration, and enclave-component security reviews.
- Threat-model new features and review architectural designs before release.
- Lead and review penetration tests, reproduce findings, and validate remediation plans.
- Build and own automated security guardrails across CI/CD pipelines, software supply chains, Kubernetes environments, and deployment platforms.
- Partner with product engineering teams to design and ship security fixes.
- Review authorization models, privilege management, identity integrations, and operational access controls.
- Support incident response, vulnerability management, security investigations, client audits, RFPs, security workshops, and regulatory discussions.
- Translate regulatory and compliance requirements into practical technical controls and monitor security trends for product impact.
Requirements
- Master’s or PhD in computer science, IT security engineering, or cryptography, or equivalent practical experience.
- At least 7 years of experience in application security, product security, offensive security, or security engineering.
- Background in security-critical environments such as financial services, payments, identity, custody, embedded systems, or regulated platforms.
- Strong security code-review experience in at least two of Go, C/C++, TypeScript, and Python.
- Experience with threat modeling, secure design reviews, penetration testing, business-logic flaws, authorization issues, cryptographic misuse, and complex attack paths.
- Applied cryptography experience with PKI, TLS, X.509, AES, RSA, ECDSA, EdDSA, key management, key ceremonies, secure key storage, and signing workflows.
- Experience with HSM technologies and PKCS#11 environments.
- Strong Kubernetes and container-security experience, plus familiarity with cloud IAM, workload identity, secrets management, and policy-as-code.
- Experience with one or more of Thales/Luna HSM, AWS CloudHSM, Azure Managed HSM, Intel SGX, AMD SEV-SNP, AWS Nitro Enclaves, and Azure Confidential Computing.
- Fluent written and spoken English and the ability to explain complex security topics clearly and pragmatically.
- Ability to engage with security teams, auditors, regulators, enterprise clients, and prospect CISOs.
- Preferred experience includes blockchain and smart-contract security, MPC, threshold signatures, fuzzing, secure software testing, security compliance frameworks, public security research, CVEs, bug bounties, open-source security contributions, RFPs, security questionnaires, and customer due diligence.
Benefits
- Opportunity to work at the intersection of digital assets and finance with an experienced team and world-renowned experts.
- Fast-paced learning environment, entrepreneurial culture, team spirit, and growth opportunities.
- State-of-the-art technology and IT infrastructure.
- Hybrid remote work and flexible working hours.
- Fun team events.
- Target start date is Q1 2027; early applications are welcome, and applications from agencies will not be considered.
Tech Stack
Categories
