About the Role
We are hiring a Senior Engineer, Crypto Security to help design, build, and secure Schwab’s institutional‑grade digital asset custody platforms. This is a hands‑on engineering role focused on crypto‑native security capabilities and digital asset development, including secure wallet technologies, key management, cryptographic protocols, smart contract security, tokenization, custody policy enforcement, and advanced blockchain security solutions. The role partners closely with the Digital Assets engineering team to ensure custody platforms and other digital asset services are secure by design, resilient to failure, and aligned with Schwab’s risk, governance, and regulatory standards.
Responsibilities
- Contribute to the design and implementation of secure wallet solutions, including MPC, HSMs, cold/warm/hot wallet architectures, and custodial vs. non-custodial control models.
- Implement distributed key generation and signing workflows that eliminate single points of failure.
- Ensure secure handling of key lifecycle events—generation, storage, usage, rotation, and recovery.
- Work closely with Custody Leads to validate cryptographic assumptions and architectural choices.
- Design and implement security‑critical components leveraging modern cryptographic protocols, DeFi application security principles, and cross‑chain/blockchain interoperability patterns.
- Participate in evaluating and integrating advanced technologies such as Zero‑Knowledge Proofs (ZKPs), Decentralized Identity (DID) frameworks, and Central Bank Digital Currency (CBDC) architectures.
- Ensure cryptographic designs are auditable, explainable, and production‑ready.
- Build and configure programmable custody policy engines, including multi‑approval and quorum‑based workflows, spending thresholds and velocity limits, and role‑based access controls.
- Translate risk, compliance, and business rules into deterministic, testable technical policies.
- Ensure policies are observable, enforceable, and version‑controlled.
- Work in close partnership with Crypto Custody engineering, Enterprise Cybersecurity, and Risk and compliance stakeholders.
- Identify potential vulnerabilities, failure modes, or misconfigurations early.
- Support security reviews, threat modeling, and architecture assessments.
- Contribute to incident analysis and remediation related to custody or blockchain security events.
- Evaluate and assess blockchain architectures, protocols, and ecosystems for enterprise suitability.
- Design and review smart‑contract frameworks and tokenization approaches, including tokenized securities, stablecoins, and asset representations using ERC‑20, ERC‑721, ERC‑1155, and related standards.
- Assess emerging token lifecycle, settlement, and secure on‑chain governance models for applicability to Schwab’s business.
- Implement and audit secure, cross-chain bridges and interoperability protocols (e.g., lock-and-mint, burn-and-mint, atomic swaps) to facilitate asset and data movement between networks.
- Leverage GenAI and agentic AI tools to accelerate threat modeling, cryptographic design reviews, documentation, and validation.
- Apply AI to enhance speed and rigor without compromising correctness or security.
- Develop backend services to support custody and tokenization.
- Analyze and develop secure smart contracts workflows for tokenization and stable coins.
Requirements
- 7+ years of software engineering experience with strong focus on security or cryptography.
- Hands‑on experience with secure wallet technologies and key management systems (MPC, HSMs, or equivalent).
- Strong understanding of cryptographic primitives, secure protocol design, and distributed systems.
- Experience building systems where security failures have material impact.
- Ability to collaborate effectively across engineering, security, and risk teams.
- Experience with crypto custody platforms, digital assets, or blockchain infrastructure.
- Hands‑on work with ZKPs, DID frameworks, DeFi protocols, or CBDC‑related systems.
- Experience implementing policy‑driven transaction controls in high‑risk systems.
- Strong security intuition and ability to reason through complex threat models.
- Experience using AI tools to support secure software development.
Skills
- MPC
- HSMs
- Cold, warm, and hot wallet architectures
- Custodial vs. non‑custodial control models
- Distributed key generation
- Signing workflows
- Key lifecycle management
- Cryptographic protocols
- DeFi application security
- Cross‑chain and blockchain interoperability
- Zero‑Knowledge Proofs (ZKPs)
- Decentralized Identity (DID) frameworks
- Central Bank Digital Currency (CBDC) architectures
- Web3 Security tooling
- Slither
- Mythril
- Foundry Fuzzing
- C
- C++
- Rust
- Go
- Programmable custody policy engines
- Multi‑approval and quorum‑based workflows
- Spending thresholds
- Velocity limits
- Role‑based access controls
- Segregation of duties
- Blockchain architectures
- Protocols
- Ecosystems
- Smart‑contract frameworks
- Tokenization
- Tokenized securities
- Stablecoins
- ERC‑20
- ERC‑721
- ERC‑1155
- Cross‑chain bridges
- Interoperability protocols
- Lock-and-mint
- Burn-and-mint
- Atomic swaps
- GenAI
- Agentic AI tools
Location
- On site
Work Type
- On site
- Full-time
Experience Level
- Senior
- 7+ years of software engineering experience
Salary/Compensations
- In addition to the salary range, this role is also eligible for bonus or incentive opportunities.
About the Company
- At Charles Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.
