Remote Jobs RockRemote Jobs Rock

Member of Technical Staff, Security Engineering

📅 Jan 17, 2025
Applied CryptographySymmetric And Asymmetric EncryptionHashing AlgorithmsDigital Signatures
Apply Now

📜 Description

  • Develop and implement secure cryptographic controls across infrastructure.
  • Review code across the technology stack and help engineering teams resolve security guardrail issues.
  • Build resilient components that support asset and data security.
  • Develop and maintain threat models for internal and external cryptosystem guarantees; identify technical debt and improvements.
  • Lead or contribute to security initiatives, coordinating across engineering teams and driving projects through completion.
  • Mentor engineers and collaborate across teams on security reviews, specifications, and technical decisions.

🛠️ Requirements

  • Develop and implement high-quality, secure code for cryptographic controls throughout our infrastructure.
  • Review code throughout the technology stack and help engineering teams resolve issues related to security guardrails.
  • Foster an efficient testing culture while reducing technical debt and unnecessary processes.
  • Cryptography: You possess a strong foundation in applied cryptography, including symmetric/asymmetric encryption, hashing algorithms, digital signatures, key exchange protocols, and common cryptographic libraries.
  • Security Architecture and Implementation: You can contribute to the design and implementation of secure systems, with a focus on security best practices and industry standards.
  • Hardware Security Modules (HSMs): You have experience with the configuration and use of HSMs for secure key generation, storage, and management, and understand their role in protecting sensitive cryptographic operations.
  • Authentication and Authorization: You understand and can implement various authentication and authorization mechanisms, including multi-factor authentication, OAuth 2.0, and role-based access control (RBAC).
  • Threat Modeling: You can identify and assess potential threats to systems and applications, and effectively prioritize mitigation strategies.
  • You have developed “computer science fundamentals”, i.e. concurrency, algorithms, and data structures
  • You genuinely care about code quality and test infrastructure.
Full job description
At Anchorage Digital, we are building the world’s most advanced digital asset platform for institutions to participate in crypto.
Anchorage Digital is a crypto platform that enables institutions to participate in digital assets through custody, staking, trading, governance, settlement, and the industry's leading security infrastructure. Home to Anchorage Digital Bank N.A., the first federally chartered crypto bank in the U.S., Anchorage Digital also serves institutions through Anchorage Digital Singapore, Porto by Anchorage Digital, and other offerings.
The company is funded by leading institutions including Andreessen Horowitz, GIC, Goldman Sachs, KKR, and Visa, with its Series D valuation over $3 billion. Founded in 2017 in San Francisco, California, Anchorage Digital has offices in New York, New York; Porto, Portugal; Singapore; and Sioux Falls, South Dakota. Learn more at anchorage.com, on X @Anchorage, and on LinkedIn.

With the evolving landscape of digital threats and an increasing volume of sophisticated attacks by malicious actors, we have a security policy mandating all new hires complete an in-person onboarding process - no exceptions. Security is our foundation and we prioritize physical identity verification and secure IT setup. While our security and IT logistics require physical presence to protect our infrastructure from sophisticated global threats, this move is equally about our Village culture. We believe that a laptop can be shipped, but our culture cannot.

At Anchorage Digital, we are building the world’s most advanced digital asset platform for institutions to participate in crypto.   Anchorage Digital is a crypto platform that enables institutions to participate in digital assets through custody, staking, trading, governance, settlement, and the industry's leading security infrastructure. Home to Anchorage Digital Bank N.A., the first federally chartered crypto bank in the U.S., Anchorage Digital also serves institutions through Anchorage Digital Singapore, Porto by Anchorage Digital, and other offerings.   The company is funded by leading institutions including Andreessen Horowitz, GIC, Goldman Sachs, KKR, and Visa, with its Series D valuation over $3 billion. Founded in 2017 in San Francisco, California, Anchorage Digital has offices in New York, New York; Porto, Portugal; Singapore; and Sioux Falls, South Dakota. Learn more at anchorage.com, on X @Anchorage, and on LinkedIn.  With the evolving landscape of digital threats and an increasing volume of sophisticated attacks by malicious actors, we have a security policy mandating all new hires complete an in-person onboarding process - no exceptions. Security is our foundation and we prioritize physical identity verification and secure IT setup. While our security and IT logistics require physical presence to protect our infrastructure from sophisticated global threats, this move is equally about our Village culture. We believe that a laptop can be shipped, but our culture cannot. About Anchorage Digital: Who we are   The Anchorage Village, what we call our team, brings together the brightest minds from platform security, financial services, and distributed ledger technology to provide the building blocks that empower institutions to safely participate in  the evolving digital asset ecosystem. As a diverse team of more than 600 members, we are united in one common goal: building the future of finance by providing the foundation upon which value moves safely in the new global economy.    Anchorage Digital is committed to being a welcoming and inclusive workplace for everyone, and we are intentional about making sure people feel respected, supported, and connected at work—regardless of who you are or where you come from. We value and celebrate our differences and we believe being open about who we are allows us to do the best work of our lives.   Anchorage Digital is an Equal Opportunity Employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or veteran status. Anchorage Digital considers qualified applicants regardless of criminal histories, consistent with other legal requirements. “Anchorage Digital” refers to services that are offered either through Anchorage Digital Bank National Association, an OCC-chartered national trust bank, or Anchorage Lending CA, LLC a finance lender licensed by the California Department of Financial Protection and Innovation, License No. 60DBO-11976, or Anchorage Digital Singapore Pte Ltd, a Singapore private limited company, all wholly-owned subsidiaries of Anchor Labs, Inc., a Delaware corporation.   Protecting your privacy rights is important to Anchorage Digital, and we work to maintain the trust and confidence of our clients when handling personal or financial information. Please see our privacy policy notices here.

Core Competencies:

  • Deep understanding of modern cryptography: Proficiency in symmetric and asymmetric encryption, hashing algorithms, key management, and cryptographic protocols. Blockchain protocols experience is a plus.
  • Secure coding expertise: Demonstrated ability to write secure, efficient, and well-documented code in Go, C++, C, and Rust, with a focus on cryptographic implementations.
  • Systems thinking: Ability to analyze complex systems, identify potential vulnerabilities, and design robust security solutions within a distributed architecture. Experience with Hardware Security Modules is a plus.
  • Strong problem-solving skills: Capacity to troubleshoot cryptographic issues, analyze security threats, and develop effective mitigation strategies.
  • Excellent communication and collaboration: Ability to clearly explain complex cryptographic concepts to both technical and non-technical audiences.
  • Technical Skills:

  • Develop and implement high-quality, secure code for cryptographic controls throughout our infrastructure.
  • Review code throughout the technology stack and help engineering teams resolve issues related to security guardrails.
  • Foster an efficient testing culture while reducing technical debt and unnecessary processes.
  • Complexity and Impact of Work:

  • Build robust, resilient components that are easily integrated by other teams to ensure asset and data security.
  • Develop and maintain threat models for cryptosystem guarantees, both internal and external. Monitor technical debt and proactively identify areas for improvement.
  • Lead or substantially contribute to medium and large Security Team initiatives with minimal oversight. Coordinate team members across engineering boundaries and drive projects from inception to completion.
  • Break complex projects into manageable tasks with accurate time and scope estimates. Present options clearly, analyze tradeoffs thoroughly, and provide well-reasoned priority recommendations.
  • Deliver work that aligns with departmental objectives, subject to review upon completion. Take ownership of tactical business targets that affect team performance.
  • Organizational Knowledge:

  • Understand and help implement the company's strategy by participating in planning and defining the Security Team's strategic goals in alignment with Anchorage Digital's overall objectives.
  • Stay alert to emerging company objectives and industry trends that could affect organizational success.
  • Consider security holistically across the entire product ecosystem while fostering a security-first company culture.
  • Balance speed of delivery with careful planning and precision.
  • Communication and Influence:

  • Share knowledge broadly across the team while preventing single points of failure.
  • Mentor and guide engineers throughout the Engineering team. Help them understand security's impact on Anchorage Digital's strategic goals, enabling them to develop new technologies and services safely with appropriate oversight.
  • Collaborate across teams to solve problems, review specifications, and engage in technical discussions. Communicate insights and recommendations clearly to improve processes and address technical debt.
  • Demonstrate empathy by understanding others' context, needs, motivations, and concerns—adapting communication style to maximize effectiveness.
  • You may be a fit for this role if you have:

  • Cryptography: You possess a strong foundation in applied cryptography, including symmetric/asymmetric encryption, hashing algorithms, digital signatures, key exchange protocols, and common cryptographic libraries.
  • Security Architecture and Implementation: You can contribute to the design and implementation of secure systems, with a focus on security best practices and industry standards.
  • Hardware Security Modules (HSMs): You have experience with the configuration and use of HSMs for secure key generation, storage, and management, and understand their role in protecting sensitive cryptographic operations.
  • Authentication and Authorization: You understand and can implement various authentication and authorization mechanisms, including multi-factor authentication, OAuth 2.0, and role-based access control (RBAC).
  • Threat Modeling: You can identify and assess potential threats to systems and applications, and effectively prioritize mitigation strategies.
  • You have developed “computer science fundamentals”, i.e. concurrency, algorithms, and data structures
  • You genuinely care about code quality and test infrastructure.
  • You prioritize security, end-user experience, and business value over “cool tech.”
  • You self-describe as some combination of the following: creative, humble, ambitious, detail-oriented, hardworking, trustworthy, eager to learn, methodical, action-oriented, and tenacious.
  • Although not a requirement, bonus points if:

  • In your mind the word “crypto” stands for cryptography, not cryptocurrency.
  • You read blockchain protocol white papers for fun, and stay up to date with the proliferation of cryptoasset innovations.
  • You were emotionally moved by the soundtrack to Hamilton, which chronicles the founding of a new financial system. :)
  • Skylight

    Principal or Staff Product Security Engineer

    🕒 7 days ago
    Skylight🏢 Consumer Electronics

    Own product security execution across cloud services, mobile apps, and Android, driving vulnerability remediation, security tooling, bug bounty operations, and design reviews while shipping fixes directly when needed.

    Product SecurityApplication SecurityVulnerability ManagementBackend Services And APIs
    Sardine

    Senior Application Security Engineer

    🕒 8 days ago
    Sardine👥 201 - 500 employees🏢 Financial Services

    Own application security across a large, multi-language platform by automating vulnerability management, finding authorization and business logic flaws, and driving durable fixes and secure engineering patterns.

    Application SecurityVulnerability ManagementSASTDAST
    Datadog

    Senior Security Engineer - Platform Trust & Safety

    🕒 6 days ago
    Datadog👥 5001 - 10,000 employees🏢 Computer Software

    Build platform security and trust features that protect users from abuse, guide security engineering priorities, and improve account controls through full-stack development, risk scoring, and incident response.

    Software Security EngineeringPlatform SecurityUser Security FeaturesFront-end Development
    Wayve

    Cyber Security Engineer

    🕒 6 days ago
    Wayve👥 501 - 1000 employees🏢 Computer Software

    Lead cybersecurity threat and risk assessments for onboard software and vehicle integration, define security concepts and mitigations, and embed security requirements across development, testing, and OEM collaboration.

    Cybersecurity Systems EngineeringTARASTRIDEHEAVENS 2.0
    Plaid

    Senior Product Security Engineer

    🕒 8 days ago
    Plaid👥 10,000+ employees🏢 Software Development

    Lead product security reviews and threat modeling for complex applications, APIs, and distributed systems, partnering with engineering teams to identify risks, shape secure architecture, and validate mitigations.

    Product SecurityApplication SecuritySecurity ArchitectureThreat Modeling

    Trusted by Remote Workers