Specialist, Crypto Custody

The Bullish Group has built an ecosystem focused on developing financial services for the digital assets sector through technology and investment businesses. These include: Bullish Exchange - digital asset trading services that utilize central limit order matching and proprietary market making technology to deliver deep liquidity and tight spreads within a compliant framework. The business is licensed by the Hong Kong SFC, German Federal Financial Supervisory Authority (BaFIN), and the Gibraltar Financial Services Commission. Since its launch in November 2021, Bullish Exchange has surpassed US$1.1 trillion in total trading volume, with 2H 2024 volume exceeding US$2 billion per day. Bullish Capital - an investment company which offers strategic capital, industry expertise and an extensive network of resources to support initiatives that connect conventional finance with the revolutionary possibilities of the digital economy. CoinDesk - an award-winning media, events, indices and data business servicing the global crypto economy. 

Reports to:

Bullish seeks a Specialist Engineer to help support and define the custody solutions at Bullish. As part of the Custody team, this person will be working with cross-functional teams and external stakeholders to help build and operate Custody. This individual will be involved in process development and documentation including key ceremonies, operational playbooks, responses for various compliance, and certification processes (i.e., ISO 27001, SOC 2 Type 1/2, SOX, etc).

Position Responsibilities:

• Operate and enhance the Custody platform at Bullish.

• Champion security throughout Custody from concept and definition through design and implementation to deployment and ongoing operations.

• With stakeholders, formulate and implement a strategy for custody security tailored to the specific threats/risks facing all of the pieces of the Bullish custody solutions.

• Assist peer teams in defining the security models and assessing the security of custody solutions including threat modeling, design and code reviews, security assessments, and more.

• Monitor and optimize asset movements and related processes, coordinate between teams and stakeholders to resolve any issues in an efficient and expedient manner.

• Participate in highly secure key ceremonies, ensuring the integrity and security of cryptographic keys.

• Work effectively across both the technical and governance aspects of Custody Operations, ensuring compliance with security protocols and regulatory requirements.

Required Competencies:

• 2+ years in cybersecurity, consultancy, software engineering, or computer science with a focus on security, finance, and/or blockchain.

• Experience working with cryptographic algorithms, APIs, and Tools including public key cryptography or hardware cryptographic devices (tokens, HSMs, etc).

• Be a self-starter with strong business acumen.

• Ability to work independently and with application development, quality assurance, DevOps, and peer security teams.

• The flexibility to work as part of local and global teams, and with colleagues located across different time zones, jurisdictions, and cultures.

• Basic knowledge of blockchain and cryptocurrency technology and concepts.

• Excellent verbal and written presentation skills with a proficiency in English.

• Basic knowledge of Bash scripting, Python, and NodeJS languages.

• Solid understanding of the digital asset industry, and the role of a custodian.

• Knowledge of cryptographic algorithms, APIs, and Tools including public key cryptography or hardware cryptographic devices (tokens, HSMs, etc).

• Experience managing vendor relationships.

• Experience or ability to manage and participate in highly secure key ceremonies.

• Aptitude for balancing technical tasks with governance and compliance responsibilities.

Optional but Desirable Competencies:

• Experience in banking, healthcare, or other regulated environments and/or certification and compliance standards including SOC 2, ISO 27001, or FINRA.

• Hands-on experience with blockchain technology including Bitcoin, Ethereum, EOSIO, and others including building and conducting transactions, smart contracts, multi-party transactions.

• Experience with Ansible, Docker, Rest APIs, Linux, Terraform, Buildkite, PKCS#11.

• Development experience in Python or Java.

• Bachelor’s degree or higher in a relevant field (e.g., Computer Science, Engineering, IT, Cyber Security, etc.) is highly desirable.

• Experience with creating and managing MultiSig and MPC TSS wallets across multiple networks.

• Experience working with Bitgo or Fireblocks Custody solutions.

Bullish is proud to be an equal opportunity employer. We are fast evolving and striving towards being a globally-diverse community. With integrity at our core, our success is driven by a talented team of individuals and the different perspectives they are encouraged to bring to work every day.