Role : Security Architect - DeFi & Digital Assets

About Wio Bank :

Wio Bank is the UAE's first platform bank - a digitally native financial institution reimagining banking for customers and businesses. As we expand our digital asset and decentralised finance (DeFi) capabilities, security sits at the heart of everything we build. We are establishing deep security engineering expertise in our Gurgaon office to support this growth.

Role Purpose :

The Security Architect (DeFi) will own the security architecture of Wio's blockchain, digital asset, and DeFi initiatives - from smart contract security and wallet infrastructure to secure SDLC across Web3 product lines. You will act as the technical security authority for everything on-chain, embedding security by design across engineering teams and protecting the bank and its customers in a rapidly evolving threat landscape.

Key Responsibilities :

- Define and own the end-to-end security architecture for DeFi, digital asset custody, and blockchain-based products, including wallet infrastructure, key management (HSM/MPC), and on-chain/off-chain integration points.

- Lead smart contract security reviews and audits (Solidity/EVM and other chains), including threat modelling, static and dynamic analysis, and coordination with external audit firms.

- Design and implement a secure development lifecycle (SDL) for Web3 engineering teams - secure coding standards, security gates in CI/CD, and developer security training.

- Perform threat modelling, penetration testing, and red-team style assessments across DeFi protocols, APIs, bridges, and supporting cloud infrastructure.

- Assess and monitor DeFi-specific risks : protocol exploits, oracle manipulation, MEV, bridge vulnerabilities, flash loan attacks, and counterparty/smart contract risk in integrated protocols.

- Define security requirements and conduct due diligence for third-party protocols, custodians, chains, and vendors before integration.

- Build detection and incident response playbooks for on-chain threats, working with SOC and fraud teams on monitoring of wallets, contracts, and transactions.

- Ensure alignment with regulatory and compliance expectations for virtual assets in the UAE and India (e.g., CBUAE, VARA guidance) in partnership with Risk and Compliance.

- Act as subject matter expert and advisor to senior leadership on blockchain security posture, emerging threats, and remediation priorities.

- Mentor engineers and security analysts, raising blockchain security capability across the Gurgaon and Abu Dhabi teams.

Required Experience & Skills :

- 8+ years in information security, with 3+ years focused on blockchain, Web3, or DeFi security.

- Hands-on smart contract auditing experience (Solidity/EVM essential; Rust/Move a plus) with a track record of published or client audit work.

- Strong background in application security and secure SDLC implementation at scale - ideally within a crypto exchange, blockchain security firm, fintech, or high-growth technology company.

- Practical penetration testing and offensive security experience (web, API, cloud, and on-chain).

- Deep understanding of cryptographic primitives, key management (HSM, MPC, multisig), wallet architectures, and custody models.

- Familiarity with DeFi primitives - AMMs, lending protocols, staking, bridges, oracles - and their common attack vectors.

- Experience with security tooling for Web3 (e.g., Slither, Foundry/Echidna fuzzing, Mythril, on-chain monitoring platforms).

- Strong development skills in at least one language (Python, Rust, TypeScript, or Go) and comfort reading production code.

- Cloud security experience (AWS/Azure), containerisation, and CI/CD security controls.

- Excellent communication skills - able to translate deep technical risk into clear guidance for engineers, executives, and regulators.

Preferred Qualifications :

- Recognised security certifications : OSCP, OSWE, CSSLP, CISSP, or equivalent blockchain security credentials.

- Experience at a blockchain security audit firm, crypto exchange, or digital-asset custodian.

- Contributions to open-source security research, CTFs, bug bounty programmes, or published vulnerability research.

- Prior experience working in or with regulated financial institutions.

What We Offer :

- The opportunity to build the security foundation of a regulated bank's digital asset ambitions from the ground up.

- A high-ownership, fast-moving environment with direct exposure to senior leadership.

- Competitive compensation and benefits aligned to the Gurgaon market.

Wio Bank is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.