Bitcoin Security Engineer
MicroStrategy2 months ago
Base Salary
$104k - $187k/yr
Responsibilities
- Plan and execute penetration tests against single-signature, multisignature, MPC, and hardware-wallet architectures, including key generation, storage, backup, and recovery workflows.
- Design and run red-team simulations of signing ceremonies, quorum policies, transaction approvals, insider threats, social engineering, collusion, and operational-security failures.
- Test hardware wallets, HSMs, secure elements, air-gapped devices, firmware, entropy and RNG systems, and supply-chain controls using fault-injection and side-channel research.
- Assess Bitcoin nodes, RPC and transaction-construction surfaces, PSBT handling, fee and RBF logic, transaction malleability, address derivation, and P2P/mempool attack surfaces.
- Evaluate blockchain-adjacent infrastructure including smart contracts, tokenization platforms, bridges, oracles, and on-chain settlement logic.
- Research and pressure-test the security claims, key management, access controls, segregation, and recovery processes of custodians, exchanges, and asset servicers.
- Build threat models and attack-surface inventories, prioritize findings, produce penetration-test reports with proof-of-concept exploits, and support remediation validation through retesting.
- Conduct original bitcoin, cryptography, and blockchain security research, responsibly disclose findings, engage with the security community, and develop custom tooling, fuzzers, harnesses, and test automation.
Requirements
- Bachelor’s degree in Computer Science, Cryptography, Information Security, Engineering, or a related field; a master’s degree is strongly preferred.
- Equivalent demonstrable offensive-security experience may substitute for the education requirement.
- At least 6 years of hands-on penetration testing, red-team, vulnerability research, or exploit-development experience, including substantial work with cryptographic, financial, blockchain, or bitcoin environments.
- Hands-on expertise testing Bitcoin protocols, wallets, nodes, key management, multisignature and MPC schemes, PSBT, transaction construction, derivation paths, and on-chain and off-chain attack surfaces.
- Deep understanding of cryptographic primitives and protocols, digital signatures, hashing, key generation, entropy sources, secure key storage, and hardware-backed security.
- Experience assessing bitcoin custody solutions, multisignature and hardware wallets, HSMs, recovery mechanisms, signing ceremonies, and operational-security controls.
- Proven ability to conduct original security research and translate technical findings into risk and remediation conclusions.
- Proficiency in one or more of Python, Rust, C, C++, or Go, with the ability to build test tooling, fuzzers, and proof-of-concept exploits.
- One or more offensive-security or blockchain-security certifications such as OSCP, OSEP, OSED, GPEN, GXPN, GWAPT, GREM, CRTO, CRTL, or Certified Blockchain Security Professional is strongly preferred.
- Strong written and verbal communication skills, independent judgment, high autonomy, and the ability to handle sensitive systems safely, ethically, and within authorized scope.
Benefits
- Full-time, in-person work from the Strategy office in Tysons Corner, Virginia.
- Base salary range of $103,900 to $186,900, plus potential bonus programs, sales incentives, equity awards, and comprehensive benefits.
About MicroStrategy
We provide cloud-native, AI-powered enterprise analytics software to thousands of global customers, and leverage 35+ years of software expertise to explore innovation in Bitcoin applications. We believe the combination of our operating structure, Bitcoin strategy, and focus on technology innovation provides a unique opportunity for value creation. We rebranded from MicroStrategy to Strategy in February 2025. Follow our new LinkedIn Company Page at https://www.linkedin.com/company/strategy