Principal Security Architect (On-Chain & Digital Assets)
BTSE· BTSE – Info Security
RemoteFull-timePosted 4w ago
About the role
Senior security leadership role owning security for the custody and on-chain layer of BTSE’s regulated digital-asset platform, spanning architecture, engineering, operations and regulatory assurance.
Responsibilities
- Lead end-to-end security architecture for the full custody stack: HSM/MPC key management, transaction authorization, signing quorums, address whitelisting, hot/cold wallet segregation, key ceremonies, delegated cold custodians, and secure staking deposit/withdrawal paths.
- Establish crypto-specific baseline standards, privileged-access controls, and secure SDLC requirements within our multi-account AWS environment, partnering with central InfraSec, AppSec, and IAM teams on delivery.
- Define custody and blockchain detection use cases for the SOC, and directly manage incident response procedures for crypto-specific scenarios (key compromise, unauthorized transactions, on-chain incidents) alongside Corporate Security.
- Conduct rigorous threat modeling and security reviews across internal ledger mechanics, balance idempotency, withdrawal sequencing, and smart contract integrations to guarantee transaction money-path integrity.
- Direct security assessments and ongoing assurance for external custody providers, execution systems, blockchain analytics, Travel Rule tools, and treasury integrations using group vendor security processes.
- Own control mapping against international regulatory standards (MiCA, DORA, FCA, MAS) and collaborate with Global Market Teams to maintain compliance during international expansion.
- 10+ years in information security, with a proven track record as a security architect or technical lead securing digital-asset custody, high-throughput crypto platforms, or regulated financial infrastructure.
- Direct operational experience securing crypto custody, with deep domain expertise in wallet architecture, Multi-Party Computation (MPC), Hardware Security Modules (HSMs), key ceremonies, and signing-policy design.
- Strong cloud security fundamentals (AWS preferred) in a regulated environment, with practical experience mapping security controls to licensing conditions (ISO 27001, SOC 2, NIST).
- Demonstrated experience running threat modeling, risk assessments, and incident response, with the ability to translate technical cryptographic risk into clear business and regulatory impact for non-security teams and regulators.
- Proven comfort operating in a matrixed security model, collaborating with dedicated IAM, AppSec, SOC, and infrastructure security teams rather than owning those central functions outright.
- Nice-to-Haves:Hands-on experience with Kubernetes, containers, Infrastructure as Code (Terraform), API security, Python for automation, Web3 dependency supply-chain assurance, or industry certifications (CISSP, CISM, CCSP, CCSSA). Professional fluency in Mandarin.
- Perks & Benefits: Competitive compensation package, Various team-building programs and company events, And many more! Apply and let us tell you more!
Qualifications
- 10+ years in information security
- Security architect or technical lead experience in digital-asset custody or regulated financial infrastructure
- Operational crypto custody security experience (wallet architecture, MPC, HSM, key ceremonies, signing-policy)
- Cloud security fundamentals in a regulated environment (AWS preferred)
- Experience with threat modeling, risk assessments, incident response
- Ability to operate in a matrixed security model with IAM, AppSec, SOC, and infra security teams
Skills
Required:Security architecture leadershipMPC / HSM / key managementAWS / cloud security in regulated environmentsThreat modeling and incident response
Benefits
- Competitive compensation package
- Various team-building programs and company events
- And many more
Last updated Oct 21, 2026. Interested? Apply on the company site.
About BTSE
More open roles at BTSE
- Sr Product Manager (B2B Product)4d agoHybrid (Hong Kong / Asia / Malaysia) · BTSE – Product Management
- Senior Database Administrator (PostgreSQL)1w agoTaipei · BTSE – Data
- Jr. Compliance Operations Analyst (Remote)2w agoRemote · BTSE – Compliance Operations
- Jr. Customer Service Officer (Remote)2w agoRemote · BTSE – Customer Service
- Senior Backend Engineer (Java/Python)4w agoRemote · Data /