Senior Security Engineer, Digital Assets

Your opportunityAt Charles Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).We are hiring a Senior Engineer, Crypto Security to help design, build, and secure Schwab’s institutional‑grade digital asset custody platforms.This is a hands‑on engineering role focused on crypto‑native security capabilities and digital asset development, including secure wallet technologies, key management, cryptographic protocols, smart contract security, tokenization, custody policy enforcement, and advanced blockchain security solutions.The role partners closely with the Digital Assets engineering team to ensure custody platforms and other digital asset services are secure by design, resilient to failure, and aligned with Schwab’s risk, governance, and regulatory standards.What This Engineer Will DoSecure Wallet & Key Management EngineeringContribute to the design and implementation of secure wallet solutions, including:Multi‑Party Computation (MPC)Hardware Security Modules (HSMs)Cold, warm, and hot wallet architecturesCustodial vs. non‑custodial control modelsImplement distributed key generation and signing workflows that eliminate single points of failure.Ensure secure handling of key lifecycle events—generation, storage, usage, rotation, and recovery.Work closely with Custody Leads to validate cryptographic assumptions and architectural choices.Cryptographic Protocols & Advanced Blockchain SecurityDesign and implement security‑critical components leveraging:Modern cryptographic protocolsDeFi application security principlesCross‑chain and blockchain interoperability patternsParticipate in evaluating and integrating advanced technologies such as:Zero‑Knowledge Proofs (ZKPs)Decentralized Identity (DID) frameworksCentral Bank Digital Currency (CBDC) architectures (as applicable)Ensure cryptographic designs are auditable, explainable, and production‑ready.Experience with Web3 Security tooling with Slither, Mythril, Foundry FuzzingExperience with common cryptography implementation languages such as C, C++, Rust, Go.Custody Policy Engine & Transaction ControlsBuild and configure programmable custody policy engines, including:Multi‑approval and quorum‑based workflowsSpending thresholds and velocity limitsRole‑based access controls and segregation of dutiesTranslate risk, compliance, and business rules into deterministic, testable technical policies.Ensure policies are observable, enforceable, and version‑controlled.Security Collaboration & Risk PostureWork in close partnership with:Crypto Custody engineeringEnterprise CybersecurityRisk and compliance stakeholdersIdentify potential vulnerabilities, failure modes, or misconfigurations early.Support security reviews, threat modeling, and architecture assessments.Contribute to incident analysis and remediation related to custody or blockchain security events.Experience with collaborating with security auditors, ie: Trail of bits, halborn,Blockchain Platforms, Tokenization & Smart ContractsEvaluate and assess blockchain architectures, protocols, and ecosystems for enterprise suitability.Design and review smart‑contract frameworks and tokenization approaches, including:Tokenized securitiesStablecoinsAsset representations using ERC‑20, ERC‑721, ERC‑1155, and related standardsAssess emerging token lifecycle, settlement, and secure on‑chain governance models for applicability to Schwab’s business.Experience with implementing, and auditing secure, cross-chain bridges and interoperability protocols (e.g., lock-and-mint, burn-and-mint, atomic swaps) to facilitate asset and data movement between networks.AI‑Augmented Security EngineeringLeverage GenAI and agentic AI tools to accelerate:Threat modelingCryptographic design reviewsDocumentation and validationApply AI to enhance speed and rigor without compromising correctness or security.What you haveRequired Qualifications7+ years of software engineering experience with strong focus on security or cryptography.Hands‑on experience with secure wallet technologies and key management systems (MPC, HSMs, or equivalent).Strong understanding of cryptographic primitives, secure protocol design, and distributed systems.Experience building systems where security failures have material impact.Ability to collaborate effectively across engineering, security, and risk teams.Strongly PreferredExperience with crypto custody platforms, digital assets, or blockchain infrastructure.Hands‑on work with ZKPs, DID frameworks, DeFi protocols, or CBDC‑related systems.Experience implementing policy‑driven transaction controls in high‑risk systems.Strong security intuition and ability to reason through complex threat models.Experience using AI tools to support secure software development.What Success Looks LikeWallet and key management implementations are secure, resilient, and well‑understood.Develop backend services to support custody, tokenizationCustody policy engines are correct by design and enforced consistently.Security risks are identified proactively, not reactively.The custody and security teams operate with high trust and technical confidence.Analyzing and developing secure smart contracts workflows for tokenization, stable coins.This role materially strengthens Schwab’s digital asset security posture."In addition to the salary range, this role is also eligible for bonus or incentive opportunities."What’s in it for youAt Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.We offer a competitive benefits package that takes care of the whole you – both today and in the future:401(k) with company match and Employee stock purchase planPaid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positionsPaid parental leave and family building benefitsTuition reimbursementHealth, dental, and vision insurance