The Senior Security Engineer (VP) role at Citi involves joining the Digital Assets Platform engineering team in New York, focusing on the security of institutional blockchain adoption. This hands-on position requires expertise in secure software development and cryptography, as the engineer will be responsible for protecting significant digital asset infrastructure. The role emphasizes collaboration with various teams to enhance security practices and ensure the integrity of transactions. The engineer will also engage with external vendors and stay updated on the cryptographic landscape.

• 7–10 years of experience in software engineering with a significant focus on application security, cryptography, or secure systems design.
• Strong, production-level proficiency in backend Java, including experience building security-critical, enterprise-grade services.
• Hands-on experience integrating Hardware Security Modules (HSMs) via PKCS#11, JCE/JCA, or vendor-specific APIs.
• Practical understanding of Multi-Party Computation (MPC) protocols, threshold signature schemes (TSS), or distributed key management architectures.
• Deep knowledge of applied cryptography, including symmetric/asymmetric encryption, digital signatures, key exchange protocols, and secure hashing.
• Familiarity with secure design patterns such as zero-trust, least-privilege, and secrets management.
• Experience with threat modelling frameworks and security design review processes.
• Understanding of CI/CD security tooling, including SAST, DAST, and dependency scanning.
• Strong command of distributed systems fundamentals, including microservices and API security.

• Design, develop, and maintain security-critical backend services in Java, including cryptographic libraries and key management APIs.
• Own the integration and operational lifecycle of Hardware Security Modules (HSMs), including vendor evaluation and policy enforcement.
• Architect and implement Multi-Party Computation (MPC) protocols and threshold signature schemes for distributed key management.
• Apply and enforce cryptographic best practices across the platform, including encryption and digital signatures.
• Define and implement secure design patterns for distributed systems, including zero-trust architecture and secrets management.
• Collaborate with Citi's Cybersecurity, Risk, and Architecture teams to conduct threat modelling and security design reviews.
• Champion security-by-design across the engineering team by conducting code reviews and embedding security tooling into CI/CD pipelines.
• Engage with external HSM vendors and standards bodies to stay ahead of the cryptographic landscape.
• Act as a technical escalation point for security incidents and cryptographic design decisions across the Digital Assets Platform.

• Citi offers a comprehensive benefits package including competitive pay, stock programs, healthcare coverage, retirement plans, paid time off, parental leave, and programs supporting employee wellbeing and professional development.