Blockchain Security Architect

eToro has created an intuitive Social Trading platform that gives traders and investors access to global stock markets, commodity trading, cryptocurrency trading, and more. We strive to make money management available and accessible to everyone (even to users with no prior experience or knowledge). We have over 33 million users worldwide, and our platform is available in over 140 countries around the world.

With over 1500 employees worldwide, We have locations in the US, Cyprus, UK, Australia, Germany, and Israel, and we are constantly growing and expanding into new markets.

We are constantly growing and are excited to share that we are looking for a Blockchain Security Architect to join our team!

Join us as a Blockchain Security Architect at eToro, where innovation meets security in the dynamic world of blockchain technology. Our mission is to build secure, scalable, and user-friendly blockchain solutions that empower businesses and individuals alike. As part of our cutting-edge team, you will play a crucial role in shaping the security landscape of new coins, blockchains, and digital assets.

We are at the forefront of blockchain security, providing top-notch services across various domains, including staking, decentralized finance (DeFi), and custody solutions. With a diverse, global team and a collaborative work environment, we are dedicated to fostering growth, learning, and excellence in everything we do.

Your Primary Responsibilities:

• Security and Technical Analysis: Conduct in-depth security and technical assessments of new coins and blockchain platforms to ensure robustness and reliability.
• Risk Analysis: Perform comprehensive risk evaluations for various blockchain operations such as staking, DeFi, and custody, identifying potential vulnerabilities and proposing mitigation strategies.
• Secure Development Support: Collaborate closely with R&D teams to embed security into the development lifecycle, ensuring adherence to best practices and architectural guidelines.
• Infrastructure and Product Security: Review and define architectural standards for blockchain infrastructure and products, fostering a secure ecosystem.
• Custody Solutions Management: Develop and implement secure operational policies for custody, managing a variety of technology providers and solutions.
• Perform hands-on technical operations of the Custody solution, including managing and configuring hardware and software used in Custody operations.
• Set up computers from scratch, implementing both basic and advanced security policies to ensure the integrity and confidentiality of Custody operations.
• Collaborate with the team to design Custody policies for all related solutions, including physical security policies and computer policies.
• Risk Framework Development: Lead the creation and management of risk frameworks in coordination with internal stakeholders, focusing on security and risk mitigation.
• Blockchain Monitoring and Playbooks: Define and execute on-chain monitoring strategies and develop playbooks for handling blockchain activities and incidents.

• Security Mindset: A proactive approach to identifying and mitigating security risks, with a strong focus on building secure systems from the ground up.
• Security Operations/Architectural/Cloud Experience:
• Security Operations: Experience in managing and monitoring security operations centers (SOCs), incident response, and threat hunting.
• Architectural Experience: Expertise in designing secure system architectures, including zero trust architectures, and secure development lifecycle (SDLC) practices.
• Cloud Security: Hands-on experience with securing cloud environments in Azure, implementing cloud security best practices, and leveraging cloud-native security tools.
• Deep Blockchain Knowledge: Expertise in blockchain technologies, including consensus mechanisms, public blockchain architectures, and their key architectural objects:
• Bridges: Understanding the security challenges and solutions in cross-chain bridge designs.
• Oracles: Knowledge of oracle systems, their role in providing off-chain data to smart contracts, and associated security concerns.
• Decentralized Exchanges (DEXs): Familiarity with DEX architectures, automated market makers (AMMs), and the security considerations involved.
• Crypto Wallets: Knowledge of custodial and non-custodial wallets, including their security models and operational frameworks.
• Secure User Operations: Experience in designing and managing secure user interactions within blockchain environments.
• Cryptographic Knowledge: Strong understanding of cryptographic principles and their application in blockchain systems.
• Risk Management Frameworks: Proficiency in developing and managing risk frameworks, with the ability to assess and mitigate risks effectively.