Role : Security Architect - DeFi & Digital Assets

Location : Gurugram

About the client : A Fintech Unicorn

Role Purpose :

The Security Architect (DeFi) will own the security architecture of blockchain, digital asset, and DeFi initiatives - from smart contract security and wallet infrastructure to secure SDLC across Web3 product lines. You will act as the technical security authority for everything on-chain, embedding security by design across engineering teams and protecting the bank and its customers in a rapidly evolving threat landscape.

Key Responsibilities :

- Define and own the end-to-end security architecture for DeFi, digital asset custody, and blockchain-based products, including wallet infrastructure, key management (HSM/MPC), and on-chain/off-chain integration points.

- Lead smart contract security reviews and audits (Solidity/EVM and other chains), including threat modelling, static and dynamic analysis, and coordination with external audit firms.

- Design and implement a secure development lifecycle (SDL) for Web3 engineering teams - secure coding standards, security gates in CI/CD, and developer security training.

- Perform threat modelling, penetration testing, and red-team style assessments across DeFi protocols, APIs, bridges, and supporting cloud infrastructure.

- Assess and monitor DeFi-specific risks : protocol exploits, oracle manipulation, MEV, bridge vulnerabilities, flash loan attacks, and counterparty/smart contract risk in integrated protocols.

- Define security requirements and conduct due diligence for third-party protocols, custodians, chains, and vendors before integration.

- Build detection and incident response playbooks for on-chain threats, working with SOC and fraud teams on monitoring of wallets, contracts, and transactions.

- Ensure alignment with regulatory and compliance expectations for virtual assets in the UAE and India (e.g., CBUAE, VARA guidance) in partnership with Risk and Compliance.

- Act as subject matter expert and advisor to senior leadership on blockchain security posture, emerging threats, and remediation priorities.

- Mentor engineers and security analysts, raising blockchain security capability across the Gurgaon and Abu Dhabi teams.

Required Experience & Skills :

- 8+ years in information security, with 3+ years focused on blockchain, Web3, or DeFi security.

- Hands-on smart contract auditing experience (Solidity/EVM essential; Rust/Move a plus) with a track record of published or client audit work.

- Strong background in application security and secure SDLC implementation at scale - ideally within a crypto exchange, blockchain security firm, fintech, or high-growth technology company.

- Practical penetration testing and offensive security experience (web, API, cloud, and on-chain).

- Deep understanding of cryptographic primitives, key management (HSM, MPC, multisig), wallet architectures, and custody models.

- Familiarity with DeFi primitives - AMMs, lending protocols, staking, bridges, oracles - and their common attack vectors.

- Experience with security tooling for Web3 (e.g., Slither, Foundry/Echidna fuzzing, Mythril, on-chain monitoring platforms).

- Strong development skills in at least one language (Python, Rust, TypeScript, or Go) and comfort reading production code.

- Cloud security experience (AWS/Azure), containerisation, and CI/CD security controls.

- Excellent communication skills - able to translate deep technical risk into clear guidance for engineers, executives, and regulators.

Preferred Qualifications :

- Recognised security certifications : OSCP, OSWE, CSSLP, CISSP, or equivalent blockchain security credentials.

- Experience at a blockchain security audit firm, crypto exchange, or digital-asset custodian.

- Contributions to open-source security research, CTFs, bug bounty programmes, or published vulnerability research.

- Prior experience working in or with regulated financial institutions.

What We Offer :

- The opportunity to build the security foundation of a regulated bank's digital asset ambitions from the ground up.

- A high-ownership, fast-moving environment with direct exposure to senior leadership.

- Competitive compensation and benefits aligned to the Gurgaon market.