Wallet & Crypto Security Engineer
You lead and maintain security architecture for cold, warm, and hot cryptocurrency wallets. You standardize private key lifecycle management, configure MPC and multi-signature security policies, conduct disaster recovery drills, harden public-chain nodes and RPC interfaces, and audit interactions with external smart contracts to prevent on-chain vulnerabilities and asset security risks.
Responsibilities
- Lead and maintain security architecture for cold, warm, and hot cryptocurrency wallets
- Standardize private key generation, storage, usage, backup, and destruction
- Ensure wallet systems comply with FIPS 140-2/3 standards
- Manage MPC wallet and multi-signature smart contract security policies
- Configure permissions and isolation for MPC wallets and multi-signature smart contracts
- Conduct disaster recovery drills
- Operate and maintain BTC, ETH, and Tron full nodes and RPC interfaces
- Harden public-chain nodes and RPC interfaces
- Defend against node hijacking, Sybil attacks, unauthorized access, and other security threats
- Audit business-system interactions with external smart contracts
- Identify and prevent approval phishing and reentrancy attacks
- Complete contract interaction security audits
- Conduct risk assessments and problem rectification
Requirements
- Bachelor’s degree or above in Computer Science, Cybersecurity, Cryptography, Software Engineering, Blockchain, or a related major
- 1-3 years of work experience in Web3 or blockchain security
- Basic cryptography principles
- Public and private key management
- Encrypted storage
- FIPS 140-2/3 standards
- Cold and hot wallet architecture
- MPC
- TSS threshold signatures
- On-chain multi-signature mechanisms
- Permission control
- Disaster recovery drills
- Risk investigation
- BTC, ETH, and TRON public-chain logic
- Public-chain node operation
- RPC interface security hardening
- On-chain attack prevention
- Smart contract security vulnerabilities
- Contract interaction security audits
- Risk assessment
- Problem rectification
- Digital asset and private key security