DeFi Digital Asset Security Specialist

About the role

This role focuses on enhancing the security posture of digital assets at U.S. Bank. The specialist will work with innovation, technology, and business teams to establish information security requirements and controls for digital assets and token agents on decentralized applications. This includes defining authentication, authorization, and access controls for various stakeholders such as managers, transfer agents, custodians, and fund administrators.

A key part of the position involves collaborating with Information Security Services to develop frameworks and guidelines for DeFi, digital assets, and token projects. This includes addressing the security of fractional ownership, synthetic exposures, derivatives, and perpetuals. The specialist will also provide ongoing guidance and support for these initiatives.

Success in this role means ensuring that all digital asset systems comply with security requirements, specifically addressing vulnerabilities like cross-bridge and oracle exploits, 51% attacks, reentrancy, and double-spend attacks. The specialist will contribute to a robust security environment for the bank's digital asset ventures.

The annual salary for this position ranges from $140,250 to $240,000 USD.

Skills that matter here

• DeFi Protocols: The role requires hands-on experience securing digital assets on Layer 2 networks using specific DeFi protocols and bridging mechanisms.
• Cybersecurity: Candidates should have at least five years of experience in cybersecurity to contribute to the digital assets information security program.
• Layer 2 networks: The specialist will apply design or engineering experience to secure digital assets on networks such as Arbitrum, Optimism, Base, or zkSync.
• DeFi Financial Ecosystem: Strong technical knowledge of the DeFi ecosystem, including protocols, Automated Market Makers (AMMs), and Decentralized Exchanges (DEXs), is essential.
• Cross-Chain bridges: Experience with cross-chain bridges and their security implications, including custody frameworks and oracles, is necessary for this position.
• Tokenized Securities: Knowledge of securing tokenized securities across various asset classes and understanding their structure, attributes, and settlement requirements is required.

Who this role suits

• A person with a strong background in cybersecurity, specifically with at least five years of relevant experience.
• Someone who has hands-on experience securing digital assets on Layer 2 networks and working with DeFi protocols.
• An individual who can formulate information security requirements and develop frameworks for complex digital asset initiatives.
• A professional capable of collaborating with cross-functional teams to ensure compliance with security requirements against various attack vectors.

From the employer

Primary Responsibilities:

• Work closely with innovation, technology, and business teams involved with DeFi and Digital Assets to formulate Information Security requirements, controls and guardrails for securing Digital Asset and Token Agents on dApps (decentralized applications) for authentication, authorization and access controls for stakeholders (managers, transfer agents, custodians, and fund administrators).
• Partner with Information Security Services stakeholders, to develop Information security frameworks and guidelines for addressing various DeFi, Digital Assets and tokens projects and initiatives ventured by U.S. Bank to address handling of fractional ownership, synthetic exposures, derivatives and perps, and help guide and support on routine basis.
• Collaborate with cross-functional teams to ensure Digital Asset systems are compliant with security requirements for cross-bridge and oracle exploits, 51%, reentrancy, double spend attacks etc.

Basic Qualifications:

• 1+ years of hands-on design or engineering experience to secure Digital Assets at Layer 2 networks (e.g. Arbiturm, Optimism, Base, zkSync etc.) using at least one of the DeFi Protocols (e.g., THORChain, LI.FI, Wormhole, across etc.), bridging mechanisms (e.g., Lock-and-mint, Native-to-native etc.)
• 5+ years of relevant experience in cybersecurity
• B.S or M.S. degree in Computer Science, Mathematics or related field or equivalent industry experience and certifications

Required Skills/Experience:

• This role requires strong technical knowledge of DeFi Financial Ecosystem and related protocols, Automated Market Makers (AMMs), Order Book and related DEXs (Decentralized Exchanges) in peer-to-peer cryptocurrency marketplace and Cross-Chain bridges.
• Experience reviewing, assessing and formulating Information Security controls and guardrails for custody frameworks on cross-chain bridges and oracles (e.g., LayerZero, Hyperlane, Chainlink etc.) for Digital Assets and Token security and tokens backing up the token based on regulatory, business and technology requirements.
• Knowledge of securing Tokenized Securities by asset classes (cash, money market, commercial paper, stocks, bonds etc.), related Digital Asset structure/attributes and settlement requirements and controls.

Benefits:

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short-term and long-term disability
• Pregnancy disability and parental leave
• 401(k) and employer-funded retirement plan
• Paid vacation (from two to five weeks depending on salary grade and tenure)
• Up to 11 paid holiday opportunities
• Adoption assistance
• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law.