Jobiglo

No results.

Principal Security Engineer (Crypto / Digital Assets)

Capital.com

New
Senior 🇬🇧 English
MPC key management AWS Azure GCP Python Kubernetes Containers API security Infrastructure as code SAST DAST SCA CI/CD security IAM SOC NIST CSF ISO 27001 SOC 2 GDPR MiCA DORA FCA Smart contract security

Job description

About the role

We are seeking a Principal Security Engineer with deep crypto expertise to own and lead security for our regulated digital‑asset platform. You will be responsible for the end‑to‑end security of custody, on‑chain services, staking and related infrastructure, partnering with central security teams while defining crypto‑specific requirements.

Key responsibilities

  • Own the full custody stack, including MPC key management, transaction authorisation, signing quorums, address whitelisting and withdrawal controls.
  • Define crypto‑specific hardening requirements for AWS accounts, network segmentation and data‑residency, and embed them into the SDLC.
  • Design and operate threat‑detection use cases for custody and blockchain, and lead incident response for key‑compromise or on‑chain events.
  • Assess and assure third‑party crypto vendors, applying corporate security onboarding and contract processes.
  • Map controls to MiCA, DORA, FCA and other regulatory frameworks, supporting audits and business continuity planning.

Required profile

  • 6+ years of information security experience, including senior engineering or architecture roles.
  • Hands‑on experience securing crypto custody platforms, blockchain architecture and key‑management systems.
  • Strong knowledge of cloud security (AWS preferred) in a regulated financial environment.
  • Experience with threat modelling, risk assessments and incident response in a matrixed security model.

Required skills

  • MPC key management and signing‑policy design.
  • Cloud platforms: AWS, Azure, GCP.
  • Security testing: SAST, DAST, SCA, CI/CD security gates.
  • IAM, privileged access and secrets governance for crypto signing keys.
  • Regulatory frameworks: ISO 27001, SOC 2, NIST CSF, GDPR, MiCA, DORA, FCA.

What we offer

  • Competitive salary and performance‑based rewards.
  • Generous time‑off, volunteer days and work‑ation allowance.
  • Comprehensive health, pension and location‑specific benefits.
  • Opportunity to shape security for a fast‑growing digital‑asset business.

Questions fréquentes

Le salaire n'est pas communiqué publiquement par le recruteur. Vous pouvez postuler et négocier directement avec Capital.com.
Cliquez sur "Postuler maintenant" en haut de la page. Vous pouvez importer votre CV en 1 clic — Jobiglo extrait automatiquement vos informations et postule pour vous.

Why are you reporting this job?

Thank you for your report. We will review this job.

Apply in 30 seconds

Enter your email to apply. An account will be created automatically.

Apply now →

By continuing, you accept our terms of use.

Already have an account? Login

A question about this job?

Ask it here: you will get the full job summary by e-mail, right away.

💬 Chat with us on Telegram

Published 1 hour ago

Expires 1 month from now

2 views · 0 interested

Boost your chances

Upload your CV — we will match you with relevant openings.

Analyzing your CV...

Capital.com