Job Description

Key Responsibilities:

Digital asset and custody security:

• Own the full custody stack: MPC/HSM key management, transaction authorisation, signing quorums, address whitelisting and withdrawal controls;
• Govern hot/cold wallet segregation, key ceremonies and delegated cold custodians;
• Secure staking architecture and on-chain deposit/withdrawal paths.

Platform, cloud and application security:

• Design and run cloud security across a multi-account AWS environment: account segmentation, SCPs, network and data-residency controls;
• Secure the Kubernetes platform, event-streaming layer and database architecture;
• Embed DevSecOps into the SDLC: SAST, DAST, SCA, secrets management and CI/CD security gates; own IAM, privileged access and secrets governance.

Threat detection, response and testing:

• Stand up and run threat detection, monitoring and alerting across the estate;
• Own incident response end to end: playbooks, forensics, breach notification and post-incident review;
• Run vulnerability management, pen testing and red-teaming, including custody- and blockchain-specific scenarios.

Third-party and vendor security:

• Own security assessment and ongoing assurance of the vendor stack: custody platforms, execution systems, blockchain analytics, Travel Rule and treasury tooling;
• Set security requirements for vendor onboarding, contracts and outsourcing arrangements.

Regulatory, resilience and governance:

• Map controls against MiCA, DORA, FCA, GDPR and recognised standards (ISO 27001, SOC 2, NIST CSF);
• Own operational resilience from a security angle: BC, DR and important business service mapping;
• Maintain the security policy suite and control framework; support regulatory and IT audits.

AI security:

• Secure LLM integrations, RAG pipelines and AI-enabled automation against prompt injection, data leakage and over-permissioned agents.

Required Qualifications:

• 6+ years in information security, including recent experience as a senior security engineer, security architect, or security lead;
• Direct experience securing crypto, digital-asset custody, or a regulated financial platform; strong understanding of blockchain security, wallet architecture and key management;
• Strong cloud security background on AWS (Azure or GCP also useful); hands-on with Kubernetes, containers, API security and infrastructure as code;
• Practical knowledge of security in regulated finance and how controls map to licence conditions (ISO 27001, SOC 2, NIST);
• Experience running threat modelling, risk assessments, incident response and third-party security assurance;
• Python proficiency for automation and scripting.

Preferred Qualifications:

• Recognised certifications: CISSP, CISM, CCSP, or equivalent;
• Hands-on experience with MPC or HSM-based custody, key ceremonies and signing-policy design;
• Familiarity with MiCA, DORA, FCA crypto rules, or comparable digital-asset regimes;
• Experience with blockchain analytics and Travel Rule tooling;
• Exposure to AI security, RAG architectures and ML pipelines;
• Background in secure SDLC and DevSecOps (OWASP, secure-by-design).

Soft Skills:

• Strong analytical and problem-solving skills;
• Able to translate technical risk into business and regulatory impact;
• Able to explain security risks and mitigations to non-security teams and to regulators;
• Cross-functional collaboration with risk, compliance, product and engineering teams;
• Clear documentation and communication skills.

What You Will Get in Return:

• Competitive Salary: We believe great work deserves great pay. Your skills and talents will be rewarded with a salary that makes you feel valued and motivated.
• Work-Life Harmony: Join a company that genuinely cares about you, because your life outside of work matters just as much as your time on the clock. #LI-Hybrid
• Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry.
• Employee Referral Program: Love working here? Share the love. Bring your talented friends on board and get rewarded for growing our team.
• Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus location-specific benefits and perks.
• Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply).
• Volunteer Days: Take two additional paid days each year to support causes you care about and give back to the community.