Member of the Technical Staff, Security Engineering, Cryptography
At Anchorage Digital, our mission revolves around constructing a cutting-edge digital asset platform tailored for institutional engagement in the realm of crypto. We aim to empower institutions through our crypto capabilities in custody services, staking, trading, governance, settlement, and a top-tier security framework. Anchorage Digital encompasses Anchorage Digital Bank N.A., the sole federally chartered crypto bank in the U.S., along with offerings like Anchorage Digital Singapore and Porto by Anchorage Digital.
Our funding partners include prominent institutions such as Andreessen Horowitz, GIC, Goldman Sachs, KKR, and Visa, reflecting a Series D valuation surpassing $3 billion. Originating in San Francisco in 2017, Anchorage Digital now operates from various locations like New York, Porto, Singapore, and Sioux Falls. Our team at Anchorage Digital continually pursues cutting-edge solutions and services in the crypto industry.
Core Competencies
- Extensive knowledge of contemporary cryptography, encompassing symmetric and asymmetric encryption, hashing algorithms, key management, and cryptographic protocols. Proficiency in blockchain protocols is advantageous.
- Expertise in writing secure code in Go and Python with a focus on cryptographic implementations, enhancing the efficiency and security of the digital asset platform.
- Proficient in systems thinking, capable of analyzing intricate systems, identifying potential vulnerabilities, and devising robust security solutions within a distributed architecture; familiarity with Hardware Security Modules is a plus.
- Strong problem-solving aptitude to troubleshoot cryptographic issues, analyze security threats, and develop effective mitigation strategies.
- Excellent communication and collaboration skills, adept at articulating complex cryptographic concepts to both technical and non-technical audiences effectively.
Technical Skills
- Develop and implement secure, high-quality code for cryptographic controls integrated across our infrastructure for enhanced security.
- Review code within the technological stack to address security issues, aiding engineering teams in implementing security guardrails effectively.
- Cultivate an efficient testing culture while minimizing technical debt and redundant processes.
Complexity and Impact of Work
- Construct robust, resilient components facilitating easy integration by other teams to ensure asset and data security.
- At the forefront of developing and managing threat models, ensuring cryptosystem guarantees both internally and externally are met; consistently monitoring technical debt to spot areas for enhancement.
- Lead or significantly contribute to mid to large-scale projects with the Security Team, orchestrating team members across engineering divisions to progress projects from inception till completion.
- Efficiently break down complex projects into manageable tasks with precise time and scope estimations while presenting alternatives and tradeoffs clearly to drive informed decisions.
- Deliver results aligned with departmental objectives while actively participating in reviews upon completion, taking ownership of tactical business targets affecting team performance.
Organizational Knowledge
- Contribute to implementing the company’s strategies by engaging in planning and outlining the strategic objectives of the Security Team in coherence with Anchorage Digital's overall goals.
- Stay informed about emerging company objectives and industry trends that may influence organizational success.
- Champion a comprehensive approach to security considering the entire product ecosystem, nurturing a security-first culture effectively while balancing agility with deliberation in planning and execution.
Communication and Influence
- Disseminate knowledge widely across the team to prevent reliance on individual expertise.
- Mentor and offer guidance to engineers within the Engineering team, enlightening them on security's impact in achieving Anchorage Digital’s strategic objectives, fostering innovation with proper oversight.
- Collaborate across departments to resolve issues, review specifications, and engage in technical dialogues, communicating insights clearly to refine processes and address technical debt adeptly.
- Demonstrate empathy by comprehending colleagues' contexts, needs, motivations, and concerns, adapting communication styles for maximum effectiveness in interactions.
Qualifications
- Profound expertise in applied cryptography, covering diverse cryptographic aspects such as encryption, hashing algorithms, and digital signatures.
- Hands-on experience in designing and implementing secure systems conforming to security best practices and industry standards using Golang, C++, and Python.
- Familiarity with Hardware Security Modules (HSMs) in configuring and utilizing them for secure key generation, storage, and management to enhance cryptographic operations' security.
- Sound understanding and implementation capability of various authentication and authorization mechanisms like multi-factor authentication, OAuth 2.0, and role-based access control (RBAC).
- Proficient in threat modeling to identify and evaluate potential threats targeting systems and applications, prioritizing mitigation strategies effectively.
- Strong inclination towards code quality and test infrastructure while prioritizing security, end-user experience, and business value above flashy technological features.
- Adheres to a set of personal attributes encompassing creativity, humility, ambition, attention to detail, hard work, trustworthiness, eagerness to learn, methodical approach, action-oriented mindset, and tenacity.
Bonus Points
- Distinguishing between cryptography and cryptocurrency.
- Interest in blockchain protocol white papers and staying updated on cryptoasset innovations.
- Appreciation for the soundtrack of Hamilton resonating with narratives on financial evolution.