> Markdown version of [/jobs/ext/1905734-principal-security-engineer](https://www.wearedevelopers.com/jobs/ext/1905734-principal-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Security Engineer - **Company:** MLabs - **Location:** Zwickau, Germany (Remote available) - **Experience:** Expert - **Salary:** €160,000.0 - €240,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Computing Platforms, Authentication Protocols, Cyber Security, Continuous Integration, Distributed Systems, Cryptographic Protocols, Key Management, Network Protocols, Blockchain, Software Engineering, TypeScript, Cloud Platform System, Infrastructure as Code (IaC) - **Published:** August 3, 2026 - **Apply:** https://www.adzuna.de/details/5822389807 ## About the Role * Experience: 10+ years in security engineering, product security, or security architecture roles. * Domain Expertise: Demonstrated track record of securing financial infrastructure, institutional blockchain platforms, or both. * Cryptographic Systems: Deep understanding of cryptographic protocols, wallet architectures, and key management frameworks. Direct experience with Multi-Party Computation (MPC), threshold signatures, or HSM-backed solutions is strongly preferred. * Threat Modeling: Extensive experience performing comprehensive system-level threat models and architecture reviews. * Infrastructure & Networks: Solid foundational knowledge of distributed systems, networking protocols, and cloud computing platforms (primarily AWS). * Supply Chain & IaC: Hands-on experience implementing software supply-chain defenses and managing security configurations via code to prevent drift. * Compliance & Frameworks: Familiarity with maintaining live audit cycles for frameworks such as SOC 2, ISO 27001, ISO 22301, and the NIST Cybersecurity Framework. * Development Skills: Professional familiarity with modern backend languages such as Rust or TypeScript. * Communication: Exceptional ability to communicate complex security concepts effectively to both internal engineering teams and external enterprise stakeholders., * Critical Thinking * Verbal Reasoning * Attention to Detail (Textual) * Numerical Reasoning * Problem Solving * (Note: Practice questions are provided prior to each timed 10-minute section). 1. Take-Home Technical Exercise: A practical assignment designed to assess technical problem-solving and architectural design capabilities. 2. Group Technical Interview (120 mins): A multi-part panel review covering ## Description * Architectural Leadership: Lead product security architecture, ensuring security principles are embedded into core platform design and development cycles. * Core Infrastructure Security: Analyze and secure key management systems, transaction pipelines, and signing workflows across modern distributed networks. * Threat Modeling & Review: Perform system-level threat modeling for new product features, protocols, and multi-chain integrations. * Cryptographic & Auth Security: Design and evaluate security-sensitive components, including authentication protocols, authorization frameworks, and applied cryptographic workflows. * Defense-in-Depth: Define, implement, and maintain multi-layered security controls across the application, infrastructure, and protocol layers. * Supply Chain & Environment Security: Own and expand end-to-end software supply-chain security, spanning dependency scanning in CI pipelines to local developer environments. * Infrastructure as Code (IaC): Enforce security configurations into version-controlled repositories to prevent configuration drift and enhance auditability. * Risk Research & Mitigation: Investigate emerging security risks related to blockchain protocols, institutional custody models, and novel cryptographic techniques. * Compliance & Audits: Support ongoing SOC 2, ISO 27001, and ISO 22301 compliance frameworks alongside expanding control surfaces. * Technical Enablement & Incident Response: Provide day-to-day guidance to engineering teams to make secure patterns accessible, while supporting incident response and root-cause analysis when necessary. * External Representation: Participate in security architecture reviews with tier-one banking partners, external auditors, and enterprise clients. * Industry Thought Leadership: Contribute to technical research, whitepapers, and conference presentations to advance the digital asset security field. ## Related Videos - [Pragmatic Blockchain Design Patterns: Integrating Blockchain into Business Processes](https://www.wearedevelopers.com/videos/1579-pragmatic-blockchain-design-patterns-integrating-blockchain-into-business-processes) - [Do TypeScript without TypeScript](https://www.wearedevelopers.com/videos/327-do-typescript-without-typescript) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Develop a Blockchain Application in JavaScript with Lisk SDK](https://www.wearedevelopers.com/videos/188-develop-a-blockchain-application-in-javascript-with-lisk-sdk) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)