Bitcoin Security Engineer

Bitcoin Security Engineer Job Description   Tysons Corner, Virginia   Full-time in person from Strategy Office     Strategy is expanding its Bitcoin Security program with a dedicated offensive-security function to continuously test, validate , and harden the security of Strategy's bitcoin holdings, custody relationships, and supporting infrastructure. The Bitcoin Security Engineer is a hands-on, deeply technical individual-contributor role responsible for adversarially assessing every layer of Strategy's bitcoin security posture—from cryptographic key material and signing ceremonies to the custodians, exchanges, and service providers that safeguard institutional-scale bitcoin.   Where the Director of Bitcoin Security sets architecture and strategy, this role validates it— probing wallets, hardware, protocols, and custodial controls to find weaknesses before adversaries do, and producing rigorous research and analysis that raises the security bar across the bitcoin custody ecosystem.     Bitcoin & Wallet Penetration Testing: Plan and execute hands-on penetration tests against Strategy's bitcoin wallet architectures, including single- sig, multisignature , MPC, and hardware-wallet deployments, targeting key generation, storage, backup, and recovery workflows for exploitable weaknesses.   Signing Ceremony & Custody Red-Teaming: Design and run adversarial simulations of signing ceremonies, quorum policies, and transaction-approval workflows, testing for insider-threat, social-engineering, collusion, and operational-security failure modes across cold, warm, and hot storage tiers.   Hardware & Cryptographic Testing: Perform security testing of hardware wallets, HSMs, secure elements, and air-gapped devices, including firmware analysis, fault-injection and side-channel research, entropy and RNG validation, and supply-chain tamper assessment.   Protocol, Node & Transaction-Layer Testing: Test Bitcoin node, RPC, and transaction-construction surfaces, including PSBT handling, fee and RBF logic, transaction malleability, address-generation and derivation-path validation, and P2P/ mempool -facing attack surfaces.   Blockchain Application Security: Assess the security of blockchain-adjacent infrastructure Strategy relies on, including smart contracts, tokenization platforms, bridges, oracles, and on-chain settlement logic, for vulnerabilities and abuse conditions.   Elevated Custodian Security Research & Analysis: Lead deep offensive and analytical research into the security posture of Strategy's custodians and prospective custodians, including qualified custodians, exchanges, and asset servicers, pressure-testing their key-management, segregation, access-control, and recovery claims through structured technical due diligence and adversarial threat modeling.   Threat Modeling & Attack Surface Mapping: Build and maintain comprehensive threat models and…