{"id":170410,"url":"https://alion.io/job/citi-senior-security-engineer-digital-assets-platform-vp","title":"Senior Security Engineer – Digital Assets Platform - VP","company":{"id":7841,"name":"Citi","domain":"citi.com","url":"https://alion.io/company/citi","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":379,"ghost_share":0.008,"stale_share":0.005,"repost_share":0.087,"time_to_fill_p50_days":10,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":142320,"max":213480,"currency":"USD","period":"year","gross":null,"usd_annual":213480},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Java","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Red Teaming","optional":false},{"name":"Smart Contracts","optional":false},{"name":"STRIDE","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-11T00:00:00Z","employer_posted_date":"2026-08-11","last_verified_at":"2026-10-21T00:17:42Z","board_verified":true,"closed_at":null,"days_open":71,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":70},"description":"About the Role\nDiscover your future at Citi\nWorking at Citi is far more than just a job. A career with us means joining a team of more than 230,000 dedicated people from around the globe. At Citi, you'll have the opportunity to grow your career, give back to your community and make a real impact.\nJob Overview\nCiti's Integrated Digital Assets Platform (CIDAP) is at the vanguard of institutional blockchain adoption - and security is its foundation. As digital assets move from innovation to regulated infrastructure, the cryptographic integrity of every transaction, wallet, and key lifecycle operation becomes mission-critical. We are building the security layer that the world's most sophisticated financial institution can trust.\nWe are seeking a Senior Security Engineer (VP) to join our New York-based Digital Assets Platform engineering team. This is a hands-on, Java-focused backend engineering role for a security-minded engineer who understands both the craft of secure software development and the cryptographic primitives that underpin digital asset custody, signing, and key management.\nYou will sit inside the core engineering team - writing production code every day - while being the resident authority on cryptographic design patterns, HSM integration, MPC protocols, and security architecture. Your work will directly protect billions of dollars of digital asset infrastructure used by institutional clients worldwide.\nKey Responsibilities\nDesign, develop, and maintain security-critical backend services in Java - including cryptographic libraries, key management APIs, signing workflows, and secure transaction pipelines - within Citi's Digital Assets Platform.\nOwn the integration and operational lifecycle of Hardware Security Modules (HSMs) - including vendor evaluation, API integration (PKCS#11, JCE), key generation, rotation, and policy enforcement.\nArchitect and implement Multi-Party Computation (MPC) protocols and threshold signature schemes (TSS) for distributed key management and institutional-grade wallet signing operations.\nApply and enforce cryptographic best practices across the platform - including symmetric and asymmetric encryption (AES-GCM, RSA, ECC), digital signatures (ECDSA, EdDSA), hashing, and key derivation (HKDF, PBKDF2).\nDefine and implement secure design patterns for distributed systems - including zero-trust architecture, secrets management, mutual TLS, certificate lifecycle management, and secure enclave usage.\nCollaborate with Citi's Cybersecurity, Risk, and Architecture teams to conduct threat modelling, security design reviews, and cryptographic risk assessments for new platform capabilities.\nChampion security-by-design across the engineering team - conducting code reviews with a security lens, embedding SAST/DAST tooling into CI/CD pipelines, and raising the security posture of every service shipped.\nEngage with external HSM vendors, MPC protocol libraries, and standards bodies to stay ahead of the cryptographic landscape and inform Citi's technology roadmap.\nAct as a technical escalation point for security incidents, vulnerability triage, and cryptographic design decisions across the Digital Assets Platform.\nQualifications Required\n7-10 years of experience in software engineering with a significant focus on application security, cryptography, or secure systems design\nStrong, production-level proficiency in backend Java - including experience building security-critical, enterprise-grade services\nHands-on experience integrating Hardware Security Modules (HSMs) via PKCS#11, JCE/JCA, or vendor-specific APIs\nPractical understanding of Multi-Party Computation (MPC) protocols, threshold signature schemes (TSS), or distributed key management architectures\nDeep knowledge of applied cryptography - symmetric/asymmetric encryption, digital signatures, key exchange protocols, certificate management (PKI/X.509), and secure hashing\nFamiliarity with secure design patterns - zero-trust, least-privilege, secrets management, mTLS, and secure enclave technologies\nExperience with threat modelling frameworks (STRIDE, PASTA, or equivalent) and security design review processes\nUnderstanding of CI/CD security tooling - SAST, DAST, dependency scanning, secrets scanning\nStrong command of distributed systems fundamentals - microservices, API security (OAuth 2.0, JWT), and secure inter-service communication patterns\nAdvantageous\nExperience in digital asset custody, blockchain key management, or institutional crypto infrastructure\nFamiliarity with smart contract security patterns and on-chain transaction signing workflows\nKnowledge of financial services regulatory frameworks relating to cryptographic controls (NIST SP 800-57, FIPS 140-2/3, PCI-DSS)\nExposure to MPC libraries such as MPC-CMP, tss-lib, or equivalent open-source frameworks\nBackground in penetration testing, red team exercises, or formal security certifications (CISSP, CSSP, CEH, OSCP)\nEducation\nBachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical discipline - required\nMaster's or PhD in Cryptography, Information Security, or Computer Science - a strong advantage\nCiti is an equal opportunity and affirmative action employer. Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.\n------------------------------------------------------\nJob Family Group:\nTechnology------------------------------------------------------\nJob Family:\nApplications Development------------------------------------------------------\nTime Type:\nFull time------------------------------------------------------\nPrimary Location:\nNew York New York United States------------------------------------------------------\nPrimary Location Full Time Salary Range:\n$142,320.00 - $213,480.00In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.\n------------------------------------------------------\nMost Relevant Skills\nPlease see the requirements listed above.------------------------------------------------------\nOther Relevant Skills\nFor complementary skills, please see above and/or contact the recruiter.------------------------------------------------------\nAnticipated Posting Close Date:\nAug 18, 2026------------------------------------------------------\nAutomated Processing and AI\nWe use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.\nImportantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.\nIllinois residents - AI Notice and Right\n------------------------------------------------------\nCiti is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.\nIf you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.\nView Citi’s EEO Policy Statement and the Know Your Rights poster.","description_format":"text","description_chars":8307,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Smart Contracts & Security","Wealth Management & Financial Advisors","Payment Processing & Gateways","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-08-29T23:03:55Z"},{"event":"close","at":"2026-09-03T17:29:46Z"},{"event":"reopen","at":"2026-09-03T20:29:50Z"},{"event":"close","at":"2026-09-04T11:30:16Z"},{"event":"restore","at":"2026-09-15T03:18:18Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.386,"p_room":0.28,"age_days":70,"expected_fill_days":10,"reasons":["conf:40","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":{"stated_usd_annual":213480,"is_top_pay":true},"html_url":"https://alion.io/job/citi-senior-security-engineer-digital-assets-platform-vp","json_url":"https://alion.io/job/citi-senior-security-engineer-digital-assets-platform-vp.json","meta":{"generated_at":"2026-10-21T00:58:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1503,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7841},"rest":"https://alion.io/mcp/rest/get_company?id=7841"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fciti-senior-security-engineer-digital-assets-platform-vp"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fciti-senior-security-engineer-digital-assets-platform-vp"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fciti-senior-security-engineer-digital-assets-platform-vp"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/citi-senior-security-engineer-digital-assets-platform-vp\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fciti-senior-security-engineer-digital-assets-platform-vp"}]}