remote
Cryptography Security Engineer - BNY
Security Engineer
Design and implement secure cryptographic solutions using Go, C/C++, and Rust. Perform threat modeling, evaluate cryptographic libraries, and ensure robust security for financial systems.
About the role
Key Responsibilities
- Develop and maintain high‑performance cryptographic primitives and protocols in Go, C/C++, and Rust.
- Conduct threat modeling and security assessments for new and existing financial applications.
- Evaluate, integrate, and harden third‑party cryptographic libraries to meet compliance and performance requirements.
- Collaborate with software engineering, risk, and compliance teams to embed security controls throughout the development lifecycle.
- Provide guidance, code reviews, and mentorship on secure coding practices and cryptographic best practices.
Requirements
- 5+ years of professional experience in systems programming with Go, C/C++, or Rust.
- Deep understanding of modern cryptography, including symmetric, asymmetric, hash functions, and key management.
- Proven experience in threat modeling methodologies (e.g., STRIDE, DREAD) and applying them to complex financial systems.
- Hands‑on experience evaluating and hardening cryptographic libraries such as OpenSSL, BoringSSL, libsodium, or similar.
- Strong problem‑solving skills, ability to work in a fast‑paced, hybrid environment, and excellent communication of security concepts to technical and non‑technical stakeholders.