Security Engineer, Digital Asset Custody

We are hiring a Senior Security Engineer, Digital Asset Custody to serve as the technical authority for Crypto Custody engineering. This role will have deep ownership of key management, custody security architecture, and risk posture across the organization’s digital asset platforms. This is a hands-on, high-impact individual contributor role where the engineer sets technical direction, defines custody architecture, and owns critical design decisions across HSMs, MPC, key storage, policy enforcement, disaster recovery, and incident response., * Design, implement, and evolve institutional-grade key management architectures, including Hardware Security Modules (HSMs) and Multi-Party Computation (MPC).

• Define architectural patterns across hot wallet, warm wallet, and cold storage models, ensuring designs align with regulatory, security, and audit expectations.
• Partner with Cybersecurity and Risk to embed defense-in-depth and zero-trust principles into custody design.
• Lead the design of the Custody Policy Engine, governing authorization, approvals, transaction controls, and policy enforceability.
• Translate business, legal, and risk requirements into clear, enforceable technical controls.
• Own custody-specific disaster recovery strategies, including key recovery and chain event scenarios.
• Author and maintain incident response and recovery runbooks for custody-related failures or security events.
• Act as the custody architecture authority, ensuring consistency across wallets, blockchains, and platforms while identifying and mitigating risks.
• Leverage GenAI and agentic AI tools to accelerate architecture design, threat modeling, documentation, and testing.

• 10+ years of software engineering experience, with deep specialization in security-sensitive or cryptographic systems.
• Proven ability to design systems where failure has material risk implications.
• Strong grounding in distributed systems, secure architectures, and fault-tolerant design.
• Track record of acting as a technical authority without formal people management.

Technical Skills:

• Strong hands-on experience with HSMs, MPC frameworks, and secure key management systems.
• Experience with Web3 Security tooling such as Slither, Mythril, and Foundry Fuzzing.
• Experience with common cryptography implementation languages such as C, C++, Rust, and Go.
• Experience collaborating with security auditors.

Preferred Qualifications

• Experience with crypto custody, digital asset platforms, or blockchain infrastructure.
• Prior ownership of incident response, DR design, or security runbooks.
• Ability to articulate risk-based trade-offs clearly to technical and non-technical stakeholders.
• Experience applying AI tools to complex engineering workflows.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at