OCC TRUST · PRIVATE · Anchorage Digital
Engineering Lead, Security
Security people-manager at Anchorage Digital, the OCC-chartered crypto bank. United States, remote only after a mandatory in-person onboarding. The Lever record was created on 23 January 2026. Pay is not disclosed. A 17% layoff was reported the week of 2 October 2026.
You are deciding whether to lead security, or to own stablecoin product, at a trust company that mandates in-person onboarding and was reported to be laying people off the week of 2 October 2026.
Blockchain Lab analysis, for a candidate deciding whether to apply. We are not the employer. Compensation on this posting: Not disclosed.
Since created
256 days — confirm the req
Equity
Private. Illiquid.
Series D mark
Over $3 billion
Where
United States
- Status
- Open on the employer board — checked 2026-10-06
- Posting created
- 2026-01-23 · 256 days before this check
- Location
- United States
- Remote eligibility
- United States, described as full-time remote. The same posting mandates in-person onboarding with no exceptions.
- Employment
- Full-Time - Remote
- Compensation
- Not disclosed
- Experience, as stored
- 8+ years in security or software engineering, including 3+ years as a formal people manager. From the posting.
- Board updated
- Not disclosed. Lever’s public record gave a created date, not a later edit.
Apply on the employer siteThe company
Security review of a local demoMap each finding to its controlDecision board
Blockchain Lab analysis
Security people-manager at Anchorage Digital, the OCC-chartered crypto bank. United States, remote only after a mandatory in-person onboarding. The Lever record was created on 23 January 2026. Pay is not disclosed. A 17% layoff was reported the week of 2 October 2026.
Apply if
- Eight or more years technical, three or more as a formal people manager, as the posting says.
- You can manage and still review security work. They asked for a player-coach.
- You will do the in-person onboarding. They wrote 'no exceptions'.
Do not apply if
- You want an IC seat with no reports.
- You will not travel to onboard.
- You need a salary. It is not on the page.
You would own
A security team's priorities, hiring, and the systems they already run: vulnerability management, response, monitoring, application security.
You would not own
It does not own the stablecoin product seat, a disclosed wage, or an exemption from onboarding.
What they wrote, and what we read
Employer stated
8+ years technical, 3+ years as a formal people manager. You may manage ICs and may manage other managers.
Reading
This is a management seat. A brilliant IC who wants a lead title without a team will fail their own rubric.
Employer stated
All new hires complete in-person onboarding. No exceptions.
Reading
The location line says United States and full-time remote. Read the security policy under it before you believe the word remote.
Employer stated
The posting cites a Series D valuation over $3 billion.
Reading
That sentence is the employer's, and it is older than the February 2026 Tether investment The Information described at $4.2 billion. Ask which mark an offer would use. Neither figure is cash compensation.
Anchorage was the first digital-asset firm with an OCC national trust charter, in 2021. Nathan McCauley is CEO. Diogo Mónica is the co-founder beside him in the public account. The Information reported on 2 October 2026 that McCauley told staff the company was cutting 17% of jobs, that headcount was about 400 in his February 2026 testimony, and that Tether had invested $100 million earlier in 2026 at a $4.2 billion valuation. The company did not comment in that piece. A req created in January may have survived the cut or it may be a ghost. Ask.
You would be joining a bank, not a startup that happens to hold keys. The posting's own investor sentence — a16z, GIC, Goldman Sachs, KKR, Visa, Series D over $3 billion — is what they still print. Hold it next to the layoff report. Culture and runway questions are the same question.
Ninety days — illustrative
Not the employer’s onboarding plan.
- Days 1–30: meet every report. Learn what is already on fire. Do not reorganise in the first month after a layoff.
- Days 31–60: one process you removed.
- Days 61–90: a hiring plan that matches the headcount they will actually approve.
A week you can rehearse
- Tell a management story that includes underperformance, not only coaching.
- Name the security domain you are deep in, and the ones you only know.
- Ask whether this req was reconfirmed after the reported October cuts.
Ask them
- Is this seat still open after the reported 17% reduction?
- What is the cash range, and which valuation is on the equity grant?
- Where is the in-person onboarding, and who pays for it?
Walk away if
- They will not discuss the layoff report.
- In-person onboarding is negotiable after the posting said it was not.
- The team you would manage does not exist yet, and there is no headcount.
Proof you can build before you apply
- The security-review lab, plus a one-page plan for a team of five. Illustrative.
The company you would actually join
Blockchain Lab analysis
Public reporting and the employer’s own releases. Not a relationship with Blockchain Lab. Not a credit opinion.
- Founded
- 2017, in San Francisco. Nathan McCauley is the chief executive on the October 2026 reporting. Diogo Mónica is the co-founder paired with him in the company's public origin.
- Base
- Both seats say United States and full-time remote. Both mandate in-person onboarding, no exceptions. Offices named on the posting include New York, Porto, Singapore, and Sioux Falls.
- Status
- Private. OCC national trust charter since 2021, as The Information described it. Equity is not stock you can sell.
- People
- About 400 employees globally as of McCauley's February 2026 testimony, The Information reported. A 17% cut on that base is roughly 68 people if headcount had not already moved. The company did not comment, the same piece said.
Anchorage's unusual fact is the charter. In 2021 it became the first crypto firm with a national trust charter from the OCC. That is why the clients are banks and why the stablecoin seat reads like a payments-product role at a bank: idempotency, webhooks, Fedwire, reconciliation. The security-lead seat is a manager's job with a player-coach clause — 8 years technical, 3 years as a formal people manager, distributed team. Neither posting discloses pay. Both disclose a security policy: every new hire completes in-person onboarding, no exceptions.
The week this desk was checked, The Information reported that McCauley had told employees the firm was cutting 17% of staff. About 400 people had been the February testimony. The same article is the source for the $4.2 billion Tether mark. A company can take strategic capital and cut staff in the same year. The candidate question is whether your seat is the expansion or the backfill. The stablecoin product is the expansion story — USAT and a Western Union coin are named in that reporting. The security lead is the function that does not get to be a press release. Ask which team the cut landed on.
Founders
Nathan McCauley
Co-founder and CEO
The executive The Information says told staff about the cuts the week of 2 October 2026. He is also the person whose February testimony is the source of the 400-employee figure. If you interview, you are interviewing a company in the week after that conversation, whether or not the recruiter mentions it.
Diogo Mónica
Co-founder
The other founder of the 2017 San Francisco company. The charter and the bank posture are the culture, not a startup loft. A product manager who has not shipped inside a bank will feel it on the stablecoin seat, because the posting asks for ACH, RTP, and Fedwire as fluency.
What the company sells
Custody under a charter
The federal trust is the product. Clients are institutions. The security-lead seat is the practice that has to match that claim.
Stablecoins
The product seat owns the stablecoin platform: banks, PSPs, clearing, fiat conversion, settlement. The Information named USAT, with Tether, and Western Union's USDPT among issuance work.
What the posting already discloses
Series D valuation over $3 billion. Backers named there include a16z, GIC, Goldman Sachs, KKR, and Visa.
Capital
Series D mark
Over $3 billion
Employer-stated on the posting. Older than the Tether mark.
Tether round
$4.2 billion
The Information. $100 million strategic.
These seats' pay
Not disclosed
Neither posting states a band.
Headcount
About 400, then a cut
February testimony, then a reported 17% reduction the week of 2 October 2026.
On the posting
Series D
Valuation over $3 billion
The employer's line: funded by a16z, GIC, Goldman Sachs, KKR, and Visa, Series D valuation over $3 billion. This brief does not restate a round size the posting did not put next to that sentence.
2026, before October
Tether strategic
$100 million at $4.2 billion
The Information, 2 October 2026: a $100 million strategic investment from Tether valuing the company at $4.2 billion, described as February's mark in the layoff piece. Cointelegraph's report of the same layoff repeats the investment. Not a retail round.
What should change your mind
- A reported layoff in the week of the check. Confirm the req survived it.
- Private equity at a $4.2 billion strategic mark. Illiquid, and preference stacks matter.
- In-person onboarding is not optional, even on a remote US contract.
- Bank-grade product work. A DeFi CV without rails experience will bounce off the stablecoin posting's own requirements.
Ask them
- Did the 17% cut touch this team, and is the req still funded?
- What is the strike relative to the $4.2 billion mark, and what did Tether get besides equity?
- Where is onboarding, and how long are you required to be there?
- Which stablecoins are in production versus announced?
Sources
- The Information, layoff and the $4.2 billion mark, 2 Oct 2026
- Cointelegraph's account of the same report
If a figure is not in those sources, it is not in this brief on purpose.
What the employer actually wrote
Employer stated. Engineering lead for security at Anchorage Digital: a player-coach over vulnerability management, incident response, and monitoring, inside a federally chartered trust company.
- You have experience leading distributed teams, working cross-functionally across varying time zones
- Deep understanding of security fundamentals including vulnerability management, incident response, security monitoring, and secure coding practices
- You've maintained a "player-coach" skillset with the ability to provide technical guidance while managing people and processes
- You genuinely enjoy learning new things and have a proven track record of diving below the surface when faced with uncertainty, understanding the "why" and the "how," not just the "what"
- Demonstrate extensive knowledge across multiple security domains (vulnerability management, incident response, security monitoring, application security) with deep expertise in at least one area
Source: the employer’s public Lever record, job b5dfd585-f708-41c9-b9bf-94adde925067. Open the original. First seen by this desk 2026-10-06. Nothing above the fold is a substitute for that page.
A reading of the work
Blockchain Lab analysis. These lines are a reading of the advertisement. They are not extra hiring requirements.
- People management is not optional. The posting asks for 3+ years of it.
- In-person onboarding is a security policy, not a preference.
- A layoff reported the week of 2 October 2026 is the first question, not the tenth.
Still not disclosed
- Anything the compensation line does not already quote. A printed band is the employer’s sentence for the place they named — not a Blockchain Lab estimate, and not a promise for every location on the posting.
- A later edit date. Lever exposed when the posting was created, not when it was last refreshed.
- Which countries may apply. “Remote” alone is not worldwide eligibility. If the employer wrote a country or a region, that sentence is theirs — still ask which entity can hire you.
- Visa sponsorship, the real on-call rota, and the employing subsidiary, unless the posting already named them.
Not a recommendation to apply. Not an employer assessment. Figures from public reporting move, and a database is not a filing. How this desk labels evidence. Report a listing.
Anchorage Digital · United States · pay not disclosed
Apply