Security Engineer - OpenSSL or MPC- Blockchain nodes/APIs - Intel SGX

Syncreon Consulting is seeking a Security Engineer for an onsite role in New York, NY. The position centers on OpenSSL or multi-party computation (MPC) implementations for blockchain nodes and APIs, leveraging secure software development practices and deep cryptography expertise, with experience in hardware security features such as Intel SGX.

Requirements

Candidates should demonstrate a blend of secure software development know-how and cryptography engineering, along with hands-on work in secure coding and cryptographic tooling. The role calls for practical experience across the following areas, with an emphasis on building and auditing robust crypto solutions for custody-related workflows:

• Expertise in secure software development
• Expertise in cryptography engineering
• Proficiency in secure coding practices, particularly in C/C++, Go, or Rust
• Ability to use or audit cryptographic libraries, including OpenSSL or MPC-specific libraries
• Familiarity with hardware security features such as Intel SGX and hardware security modules (HSMs)
• Comfortably collaborate with MPC or cryptographic frameworks commonly used to build crypto custody solutions
• Strong threat modeling skills to anticipate and mitigate attack vectors, including man-in-the-middle scenarios during MPC rounds and potentially malicious client apps
• Experience with cryptographic protocols, including implementing or auditing key exchange or signature schemes
• Knowledge of common cryptographic pitfalls such as weak random number generation or error handling that could leak information
• Experience integrating with blockchain nodes and APIs
• Understanding of blockchain transaction formats, including Bitcoin UTXOs and Ethereum RLP
• Able to parse and construct transactions for signing
• Knowledge of secure storage and databases
• Familiarity with cloud security practices to avoid misconfigurations
• Familiarity with containerization for deployment
• Experience with Trusted Execution Environments, including remote attestation with Intel SGX

Technologies

The following technologies form the core of the role and the day-to-day toolkit:

• C
• C++
• Go
• Rust
• OpenSSL
• MPC-specific libraries
• Intel SGX
• HSMs
• Blockchain nodes and APIs
• Bitcoin UTXOs
• Ethereum RLP
• Secure storage and databases
• Cloud security
• Containerization
• Remote attestation