Security Architect
Blockstream9 months ago
Responsibilities
- Define and drive security architecture across applications, services, and infrastructure.
- Partner with engineering teams to design and implement secure software systems, focusing on backend and data security.
- Conduct threat modeling, risk assessments, and security reviews for new and existing products.
- Develop and enforce secure coding practices, frameworks, and review processes.
- Collaborate with DevOps on cloud and container security, CI/CD hardening, and access controls.
- Evaluate and integrate security tools for code scanning, vulnerability management, and incident response.
- Guide and mentor engineers on secure application development best practices.
- Monitor emerging security trends, compliance standards, and attack vectors in fintech and blockchain.
Requirements
- 10+ years of experience in software engineering or security architecture roles.
- Strong full-stack background with deep backend security expertise in Python, Go, C/C++, Rust, or similar languages.
- Experience designing and securing systems for enterprise fintech, banking, or blockchain environments.
- Knowledge of cryptography, authentication, and key management.
- Hands-on experience with cloud security, including AWS, GCP, or similar platforms.
- Familiarity with threat modeling, secure SDLC, and application security frameworks including OWASP, NIST, and ISO 27001.
- Strong communication skills for explaining risks and solutions to technical and non-technical stakeholders.
- Experience with Bitcoin, Lightning, or blockchain protocols is preferred.
- Contributions to open-source security tools or projects are preferred.
- CISSP, OSCP, CEH, or equivalent security certifications are preferred but not required.
Categories
About Blockstream
Blockstream builds Bitcoin infrastructure and software, including the Liquid sidechain for asset issuance and settlement, the Core Lightning implementation, the Green wallet, and the Jade hardware wallet. It sells enterprise software and consulting to financial institutions and exchanges, and also operates mining and hosting services. Founded in 2014 by Adam Back, it is privately held.