# Member of Technical Staff, Security Engineering

**Company**: Anchorage Digital
**Location**: United States
**Work arrangement**: remote
**Experience**: staff
**Job type**: full-time
**Category**: Engineering
**Industry**: Finance

**Apply**: https://jobs.lever.co/anchorage/e5d0f1ac-3126-481e-857f-db6ae8eb67e9
**Canonical**: https://yubhub.co/jobs/job_576661da-536

## Description

At Anchorage Digital, we are building the world’s most advanced digital asset platform for institutions to participate in crypto.\n\nWe are seeking a highly skilled Member of Technical Staff, Security Engineering to join our team. This role will be responsible for developing and implementing high-quality, secure code for cryptographic controls throughout our infrastructure.\n\nKey Responsibilities:\n\n* Develop and implement high-quality, secure code for cryptographic controls throughout our infrastructure.\n* Review code throughout the technology stack and help engineering teams resolve issues related to security guardrails.\n* Foster an efficient testing culture while reducing technical debt and unnecessary processes.\n\nComplexity and Impact of Work:\n\n* Build robust, resilient components that are easily integrated by other teams to ensure asset and data security.\n* Develop and maintain threat models for cryptosystem guarantees, both internal and external.\n* Monitor technical debt and proactively identify areas for improvement.\n* Lead or substantially contribute to medium and large Security Team initiatives with minimal oversight.\n* Coordinate team members across engineering boundaries and drive projects from inception to completion.\n\nOrganizational Knowledge:\n\n* Understand and help implement the company's strategy by participating in planning and defining the Security Team's strategic goals in alignment with Anchorage Digital's overall objectives.\n* Stay alert to emerging company objectives and industry trends that could affect organizational success.\n* Consider security holistically across the entire product ecosystem while fostering a security-first company culture.\n\nCommunication and Influence:\n\n* Share knowledge broadly across the team while preventing single points of failure.\n* Mentor and guide engineers throughout the Engineering team.\n* Collaborate across teams to solve problems, review specifications, and engage in technical discussions.\n* Communicate insights and recommendations clearly to improve processes and address technical debt.\n\nYou may be a fit for this role if you have:\n\n* A strong foundation in applied cryptography, including symmetric/asymmetric encryption, hashing algorithms, digital signatures, key exchange protocols, and common cryptographic libraries.\n* Experience with the configuration and use of Hardware Security Modules (HSMs) for secure key generation, storage, and management.\n* Understanding and implementation of various authentication and authorization mechanisms, including multi-factor authentication, OAuth 2.0, and role-based access control (RBAC).\n* Ability to identify and assess potential threats to systems and applications, and effectively prioritize mitigation strategies.\n* Developed computer science fundamentals, such as concurrency, algorithms, and data structures.\n* Genuine care about code quality and test infrastructure.\n* Prioritization of security, end-user experience, and business value over 'cool tech'.\n\nAlthough not a requirement, bonus points if:\n\n* You read blockchain protocol white papers for fun, and stay up to date with the proliferation of cryptoasset innovations.\n* You were emotionally moved by the soundtrack to Hamilton, which chronicles the founding of a new financial system.

## Skills

### Required
- cryptography
- symmetric/asymmetric encryption
- hashing algorithms
- digital signatures
- key exchange protocols
- Hardware Security Modules (HSMs)
- authentication and authorization
- multi-factor authentication
- OAuth 2.0
- role-based access control (RBAC)
- threat modeling
- computer science fundamentals
- concurrency
- algorithms
- data structures