# Senior Staff Security Architect (Digital Assets)

**Company**: SoFi
**Location**: Seattle, WA
**Experience**: senior
**Job type**: full-time
**Salary**: The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate's experience, skills, and location.
**Category**: Security
**Industry**: Finance

**Apply**: https://job-boards.greenhouse.io/sofi/jobs/8202635003?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/senior-staff-security-architect-digital-assets-21c73e0c-67b/

## Description

The SoFi Security Architecture and Enablement team assists and partners with engineering, product, and design organizations to build secure products and services delivered to members and customers. As a Senior Staff Security Architect (Digital Assets), you will serve as the principal technical authority responsible for the end-to-end security architecture of digital asset platforms, products, and services.

Responsibilities:

- Advocate and establish security standards and best practices across digital assets and cryptocurrencies product lifecycles.

- Lead threat modeling, architecture design reviews, and define technical security standards for crypto platforms.

- Architect end-to-end security architectures for custody, deposit, withdrawal, staking, and treasury operations.

- Design and implement Multi-Party Computation (MPC) protocols, multi-signature workflows, and Hardware Security Module (HSM) / Key Management Service (KMS) key lifecycles.

- Secure wallet integrations, partner APIs, and critical connections with institutional custody providers and settlement networks.

- Automate security verification checks (SAST, DAST, SCA) and embed "security as code" controls into continuous delivery pipelines.

- Assess smart contract ecosystems, cloud environments, and blockchain infrastructure to identify vulnerabilities and engineer mitigations.

- Partner with Legal, Risk, and Compliance teams to evaluate digital asset regulatory requirements, perform security impact assessments, and establish digital asset policies.

- Develop security test plans, build reusable blueprint solutions, and balance stringent crypto security controls with a seamless member user experience.

- Partner across multiple engineering teams to raise the security bar, mentoring senior engineers and leading incident response coordination for complex crypto threats.

Requirements:

- Bachelor's degree + 4+ years of relevant experience OR Master's degree + 3+ years of relevant experience in Computer Science, Information Security, Engineering, or a related technical discipline.

- Proven security architecture experience with deep specialization in cryptocurrency, digital assets, and decentralized systems.

- Demonstrated technical expertise in applied cryptography, Multi-Party Computation (MPC), Threshold Cryptography, and HSM/KMS key lifecycle management.

- Solid track record designing end-to-end Zero Trust security architectures for high-stakes institutional crypto custody, staking, trading, and settlement platforms.

- In-depth knowledge of core blockchain protocol internals, transaction signing lifecycles, and multi-signature wallet infrastructures.

- Proven proficiency in threat modeling, smart contract auditing, vulnerability assessments, and secure API design.

- Hands-on experience architecting secure cloud-native environments (AWS, Kubernetes) and embedding automated "security as code" controls into CI/CD pipelines.

- Demonstrated ability to partner with Legal, Risk, and Compliance teams to interpret digital asset regulations and operationalize compliance requirements.

- Exceptional communication and presentation skills, with a proven ability to translate complex cryptographic concepts for technical teams and senior leadership.

Nice to have:

- 10+ years of security architecture experience across enterprise infrastructure, product security, and cloud ecosystems.

- Advanced degree (Master's or Ph.D.) in Computer Science, Engineering, or a related technical discipline.

- Recognized security certifications such as CISSP, CISM, GSEC, or AWS Certified Security – Specialty.

- Proven background in financial services infrastructure, banking technologies, or supporting institutional finance platforms.

- Direct experience integrating digital asset platforms, custody platforms, trading platforms, and crypto operations.

- Broad familiarity with financial regulatory frameworks (such as SOC 2, PCI-DSS, GLBA, and NYDFS).

Compensation and Benefits: The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate's experience, skills, and location.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- Multi-Party Computation (MPC)
- Threshold Cryptography
- HSM/KMS key lifecycle management
- Zero Trust security architectures
- Blockchain protocol internals
- Smart contract auditing
- Vulnerability assessments
- Secure API design
- Cloud-native environments (AWS, Kubernetes)
- Security as code controls

### Nice to have
- CISSP
- CISM
- GSEC
- AWS Certified Security – Specialty
- Financial services infrastructure
- Banking technologies
- Institutional finance platforms
- Digital asset platforms
- Custody platforms
- Trading platforms
- Crypto operations

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/sofi/jobs/8202635003?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)