Security Architect

Responsibilities

• Define and drive security architecture across applications, services, and infrastructure
• Partner with engineering teams to design and implement secure software systems, focusing on backend and data security
• Conduct threat modeling, risk assessments, and security reviews for new and existing products
• Develop and enforce secure coding practices, frameworks, and review processes
• Collaborate with DevOps on cloud and container security, CI/CD hardening, and access controls
• Evaluate and integrate security tools for code scanning, vulnerability management, and incident response
• Guide and mentor engineers on best practices for secure application development
• Stay ahead of emerging security trends, compliance standards, and attack vectors in fintech and blockchain domains

Requirements

• 10+ years of experience in software engineering or security architecture roles
• Strong full-stack background with deep backend security expertise in Python, Go, C/C++, or Rust
• Demonstrated experience designing and securing systems for enterprise fintech, banking, or blockchain environments
• Knowledge of cryptography, authentication, and key management
• Hands-on experience with cloud security (AWS, GCP, or similar)
• Familiarity with threat modeling, secure SDLC, and modern application security frameworks (OWASP, NIST, ISO 27001)
• Excellent communication skills to articulate risks and solutions to technical and non-technical stakeholders

Preferred Qualifications

• Experience with Bitcoin, Lightning, or blockchain protocols
• Contributions to open-source security tools or projects
• Security certifications such as CISSP, OSCP, or CEH

About the Company

Blockstream was founded in 2014 by Dr. Adam Back and a group of fellow cryptographers and engineers who are passionate about Bitcoin and its potential to change the world. Today, Blockstream is the leading Bitcoin company, providing cutting-edge infrastructure solutions for enterprises, institutions, and individual Bitcoin users.