Work with hardware-backed security technologies such as TEEs and Hardware Security Modules (HSMs).
Participate in threat modeling to identify and mitigate attack vectors, including risks associated with MPC communication, malicious clients, compromised infrastructure, and network-based attacks.
Conduct security-focused code reviews and design tests to identify vulnerabilities and weaknesses in security-sensitive software.
Apply cryptographic protocols such as key exchange and digital signature schemes within production applications.
Integrate with blockchain nodes and APIs to support transaction construction, signing, and broadcasting across multiple networks.
Work with blockchain transaction formats, including Bitcoin UTXOs and Ethereum transaction encoding and formats.
Design secure mechanisms for storing sensitive information such as encrypted key shares, credentials, and audit logs.
Build secure communication between distributed signing parties using networking, RPC frameworks, and concurrency.
Apply cloud security and container security practices when deploying security-sensitive workloads.
Experience Requirements
Strong background in hands-on security engineering and secure software development.
Strong proficiency with Go (Golang) and experience building production-grade systems in Go.
Experience with C/C++ or other systems-level languages is beneficial.
Hands-on experience with Trusted Execution Environments (TEEs), particularly AWS Nitro Enclaves and/or Intel SGX.
Practical experience implementing or working with remote attestation.
Experience implementing applied cryptography or integrating cryptographic functionality into production applications.
Experience using or auditing cryptographic libraries such as OpenSSL or MPC-specific libraries.
Familiarity with Hardware Security Modules (HSMs) and hardware-backed security.
Experience with MPC or related cryptographic frameworks used in digital asset custody solutions.
Strong threat modeling skills and the ability to identify and mitigate potential attack vectors.
Understanding of common cryptographic implementation risks, including random number generation, information leakage, insecure error handling, and implementation-level vulnerabilities.
Experience integrating with blockchain nodes and APIs.
Understanding of blockchain transaction formats and transaction signing workflows.
Experience with secure data storage, encrypted secrets and key material, and audit logging.
Strong networking, distributed systems, RPC, and concurrency skills.
Understanding of cloud security and secure containerized deployments.