Principal Security Engineer

MLabs operates a core banking platform designed specifically for digital assets, enabling fintechs and financial institutions to build and scale onchain infrastructure. They are seeking a Principal Security Engineer to lead product security across the ecosystem, ensuring that security is integrated into the system's architecture and overseeing various security responsibilities.

Responsibilities:

• Architectural Leadership: Lead product security architecture, ensuring security principles are embedded into core platform design and development cycles
• Core Infrastructure Security: Analyze and secure key management systems, transaction pipelines, and signing workflows across modern distributed networks
• Threat Modeling & Review: Perform system-level threat modeling for new product features, protocols, and multi-chain integrations
• Cryptographic & Auth Security: Design and evaluate security-sensitive components, including authentication protocols, authorization frameworks, and applied cryptographic workflows
• Defense-in-Depth: Define, implement, and maintain multi-layered security controls across the application, infrastructure, and protocol layers
• Supply Chain & Environment Security: Own and expand end-to-end software supply-chain security, spanning dependency scanning in CI pipelines to local developer environments
• Infrastructure as Code (IaC): Enforce security configurations into version-controlled repositories to prevent configuration drift and enhance auditability
• Risk Research & Mitigation: Investigate emerging security risks related to blockchain protocols, institutional custody models, and novel cryptographic techniques
• Compliance & Audits: Support ongoing SOC 2, ISO 27001, and ISO 22301 compliance frameworks alongside expanding control surfaces
• Technical Enablement & Incident Response: Provide day-to-day guidance to engineering teams to make secure patterns accessible, while supporting incident response and root-cause analysis when necessary
• External Representation: Participate in security architecture reviews with tier-one banking partners, external auditors, and enterprise clients
• Industry Thought Leadership: Contribute to technical research, whitepapers, and conference presentations to advance the digital asset security field

Requirements:

• 10+ years in security engineering, product security, or security architecture roles
• Demonstrated track record of securing financial infrastructure, institutional blockchain platforms, or both
• Deep understanding of cryptographic protocols, wallet architectures, and key management frameworks
• Extensive experience performing comprehensive system-level threat models and architecture reviews
• Solid foundational knowledge of distributed systems, networking protocols, and cloud computing platforms (primarily AWS)
• Hands-on experience implementing software supply-chain defenses and managing security configurations via code to prevent drift
• Familiarity with maintaining live audit cycles for frameworks such as SOC 2, ISO 27001, ISO 22301, and the NIST Cybersecurity Framework
• Professional familiarity with modern backend languages such as Rust or TypeScript
• Exceptional ability to communicate complex security concepts effectively to both internal engineering teams and external enterprise stakeholders
• Direct experience with Multi-Party Computation (MPC), threshold signatures, or HSM-backed solutions is strongly preferred