Information Security Engineer – Stablecoin & Payments

About the role

AX Coin is building a regulated, institution‑grade digital asset platform and needs a hands‑on security expert to design, implement and operate a robust security framework across its blockchain infrastructure, platforms and data environments.

Key responsibilities

• Lead the security strategy and regulatory governance for the stablecoin business, including ISO 27001, SOC 1/2 Type II and NIST certifications.
• Design and manage enterprise‑grade key management using HSM and MPC, covering the full lifecycle of cold, warm and hot wallets.
• Establish a secure SDLC for smart contracts, conduct third‑party code audits and develop real‑time risk controls against re‑entrancy, flash‑loan and oracle attacks.
• Build highly available blockchain node clusters resilient to DDoS, eclipse and consensus‑layer attacks.
• Own end‑to‑end security architecture for cloud, applications and infrastructure, embedding security into CI/CD pipelines with automated SAST/DAST, container signing and dependency scanning.
• Deploy on‑chain forensics tools for real‑time transaction monitoring and enforce OFAC‑compliant address blocking.
• Assess and secure cross‑chain bridge deployments, including third‑party risk assessments and whitelist management.

Required profile

• Proven hands‑on experience securing large‑scale digital asset platforms or stablecoin ecosystems.
• Strong technical depth combined with the ability to execute security controls end‑to‑end.
• Experience interacting with regulators and delivering independent security reporting to boards.
• Ability to write proof‑of‑concept exploits to validate vulnerabilities.

Required skills

• Hardware Security Modules (HSM) and Multi‑Party Computation (MPC) key management.
• Smart contract security, secure SDLC and code audit processes.
• Blockchain node clustering, DDoS mitigation, eclipse attack protection.
• Cloud security architecture (AWS/Azure/GCP) and container security.
• CI/CD integration, automated SAST/DAST, container image signing, dependency vulnerability detection.
• On‑chain forensics, OFAC compliance, cross‑chain bridge risk assessment.
• Framework implementation: ISO 27001, SOC 1/2 Type II, NIST.