capital - Senior Security Specialist (Crypto / Digital Assets)
Requirements
• 6+ years in information security, including recent experience as a senior security engineer, security architect, or security lead; • Direct experience securing crypto, digital-asset custody, or a regulated financial platform; strong understanding of blockchain security, wallet architecture and key management; • Working knowledge of cloud security fundamentals (AWS preferred, Azure/GCP acceptable) in a regulated environment; • Practical knowledge of security in regulated finance and how controls map to licence conditions (ISO 27001, SOC 2, NIST); • Experience running threat modelling, risk assessments and incident response; • Comfortable operating in a matrixed security model - partnering with dedicated IAM, AppSec, SOC and infrastructure security teams rather than owning those functions outright. • Hands-on Kubernetes, containers, API security and infrastructure as code; • Python proficiency for automation and scripting; • Experience running third-party / vendor security assurance; • Recognised certifications: CISSP, CISM, CCSP, or equivalent; • Hands-on experience with MPC - based custody, key ceremonies and signing-policy design; • Familiarity with MiCA, DORA, FCA crypto rules, or comparable digital-asset regimes; • Background in secure SDLC and DevSecOps (OWASP, secure-by-design); • Experience with smart contract security review: threat modelling, commissioning and managing external audits, and driving findings through to resolution; • Experience designing transaction signing and approval flows, so that what a user or operator authorises is provably what gets signed and broadcast; • Experience reviewing business logic in the money path - withdrawal sequencing, balance idempotency, internal ledger integrity - where the flaw sits in the logic rather than the cryptography; • Familiarity with supply-chain assurance for crypto-specific dependencies: wallet SDKs, chain libraries, node clients and signing tooling, including pinning, provenance and upgrade discipline; • Experience defining bug bounty scope for crypto assets, and triaging and calibrating severity for on-chain findings. • Strong analytical and problem-solving skills; • Able to translate technical risk into business and regulatory impact; • Able to explain security risks and mitigations to non-security teams and to regulators; • Cross-functional collaboration with risk, compliance, product and engineering teams; • Clear documentation and communication skills.
Responsibilities
• Digital asset and custody security: • Own the full custody stack: MPC/HSM key management, transaction authorisation, signing quorums, address whitelisting and withdrawal controls; • Govern hot/cold wallet segregation, key ceremonies and delegated cold custodians; • Secure staking architecture and on-chain deposit/withdrawal paths. • Platform, cloud and application security: • Design and run cloud security across a multi-account AWS environment: account segmentation, SCPs, network and data-residency controls; • Secure the Kubernetes platform, event-streaming layer and database architecture; • Embed DevSecOps into the SDLC: SAST, DAST, SCA, secrets management and CI/CD security gates; own IAM, privileged access and secrets governance. • Threat detection, response and testing: • Stand up and run threat detection, monitoring and alerting across the estate; • Own incident response end to end: playbooks, forensics, breach notification and post-incident review; • Run vulnerability management, pen testing and red-teaming, including custody- and blockchain-specific scenarios. • Third-party and vendor security: • Own security assessment and ongoing assurance of the vendor stack: custody platforms, execution systems, blockchain analytics, Travel Rule and treasury tooling; • Set security requirements for vendor onboarding, contracts and outsourcing arrangements. • Regulatory, resilience and governance: • Map controls against MiCA, DORA, FCA, GDPR and recognised standards (ISO 27001, SOC 2, NIST CSF); • Own operational resilience from a security angle: BC, DR and important business service mapping; • Maintain the security policy suite and control framework; support regulatory and IT audits. • Secure LLM integrations, RAG pipelines and AI-enabled automation against prompt injection, data leakage and over-permissioned agents. • Competitive Salary: We believe great work deserves great pay. Your skills and talents will be rewarded with a salary that makes you feel valued and motivated. • Work-Life Harmony: Join a company that genuinely cares about you, because your life outside of work matters just as much as your time on the clock. #LI-Hybrid • Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. • Employee Referral Program: Love working here? Share the love. Bring your talented friends on board and get rewarded for growing our team. • Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus location-specific benefits and perks. • Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). • Volunteer Days: Take two additional paid days each year to support causes you care about and give back to the community.
Benefits
• Work-Life Harmony: Join a company that genuinely cares about you, because your life outside of work matters just as much as your time on the clock. #LI-Hybrid • Work-Life Harmony: • Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry. • Generous Time Off: • Employee Referral Program: Love working here? Share the love. Bring your talented friends on board and get rewarded for growing our team. • Employee Referral Program: • Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus location-specific benefits and perks. • Comprehensive Health & Pension Benefits: • Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). • Workation Wonderland: • Volunteer Days: Take two additional paid days each year to support causes you care about and give back to the community. • Volunteer Days: • Be a key player at the forefront of the digital assets movement, propelling your career to new heights. Join a dynamic and rapidly expanding company that values and rewards talent, initiative and creativity. Work alongside one of the most brilliant teams in the industry.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT