Principal Security Engineer at Dfns | Paris, Ile-de-France, France | Rezi

Principal Security Engineer at Dfns

Principal Security Engineer

Dfns · Paris, Ile-de-France, France

5 days ago

Principal Security Engineer

Dfns · Paris, Ile-de-France, France

5 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Lead product security across the platform, making security an inherent property of the architecture. Design new security capabilities, harden critical systems, and shape the long-term security architecture for a platform used by regulated institutions. Contribute to the security field through research, technical writing, and conference talks.

Responsibilities

  • Lead product security architecture across the platform, ensuring security is embedded into core system design.
  • Analyze and secure the platform's key management, signing workflows, and transaction pipelines.
  • Conduct system-level threat modeling for new features, protocols, and blockchain integrations.
  • Design and review security-sensitive components such as auth systems, authorization models, and cryptographic workflows.
  • Define and implement defense-in-depth controls across application, infrastructure, and protocol layers.
  • Own and expand software supply-chain security, from dependency scanning in CI to package scanning on developer laptops.
  • Drive infrastructure and security configuration into version-controlled code in GitHub to eliminate configuration drift.
  • Work with engineering teams to ensure secure design decisions during product development and architectural planning.
  • Investigate emerging risks across blockchain protocols, custody models, and cryptographic systems.
  • Support ongoing SOC 2, ISO, and certification work as the platform's control surface grows.
  • Support incident response and root-cause analysis for security-critical events.
  • Provide day-to-day security support to developers, making the secure path the easy path.
  • Represent DFNS in security architecture reviews with tier-one banks, auditors, and partners.
  • Contribute to security research and knowledge sharing through articles, talks, or technical publications.

Requirements

  • 10+ years of experience in security engineering, product security, or security architecture.
  • Experience securing financial infrastructure or blockchain platforms, ideally both.
  • Strong understanding of cryptographic systems, wallet architectures, and key management models.
  • Familiarity with MPC, threshold signatures, or HSM-backed key management is a strong advantage.
  • Experience performing system-level threat modeling and security architecture reviews.
  • Solid knowledge of distributed systems, networking protocols, and cloud infrastructure (AWS).
  • Experience with software supply-chain security, package scanning, securing the dev environment end to end.
  • Experience managing security and infrastructure configuration as code, with an eye for drift prevention.
  • Familiarity with maintaining SOC 2, ISO 27001, ISO 22301, and related certifications in a live audit cycle.
  • Knowledge of industry security frameworks such as the NIST Cybersecurity Framework.
  • Strong understanding of authentication systems, authorization models, and applied cryptography.
  • Experience working with modern backend languages such as TypeScript or Rust.
  • Clear communicator able to translate complex security risks into practical engineering decisions.

Skills

  • Security Engineering
  • Product Security
  • Security Architecture
  • Cryptographic Systems
  • Wallet Architectures
  • Key Management
  • MPC
  • Threshold Signatures
  • HSM-backed Key Management
  • System-level Threat Modeling
  • Security Architecture Reviews
  • Distributed Systems
  • Networking Protocols
  • Cloud Infrastructure (AWS)
  • Software Supply-Chain Security
  • Package Scanning
  • Configuration as Code
  • SOC 2
  • ISO 27001
  • ISO 22301
  • NIST Cybersecurity Framework
  • Authentication Systems
  • Authorization Models
  • Applied Cryptography
  • TypeScript
  • Rust

Location

  • US (remote-first)
  • EU (remote-first)

Work Type

  • Full-time
  • Remote-first

Experience Level

  • Principal

Salary/Compensations

  • $140,000–240,000 per year

Benefits

  • Healthcare
  • Travel expenses
  • 100–300 stock options vested over 4 years

About the Company

  • DFNS is the core banking platform for digital assets.
  • Since 2020, DFNS has helped fintechs and institutions build and operate onchain, with the security and reliability expected of systemically important firms.
  • The platform brings together everything required to run digital asset operations: wallets and key management, transaction processing, treasury, identity and access, policy and workflow orchestration, compliance integrations, and connectivity across 100+ blockchains.
  • More than 400 institutions and fintechs run on DFNS, including Standard Chartered, First Abu Dhabi Bank, IBM, Broadridge, Apex Group, Stripe, Post Finance, Circle, and Susquehanna.
  • The platform secures over €100B in assets and settles roughly 1% of global stablecoin volume.