Senior Security Specialist (Crypto / Digital Assets)

We are looking for a Senior Security Specialist with deep crypto domain expertise to lead security across our regulated digital-asset business. As we build out spot trading, custody, staking and on-chain services for our client base, security is the foundation the whole business stands on. This role owns it.

You will be the security owner for our crypto platform's custody and on-chain layer end to end: architecture, engineering, operations and regulatory assurance for the parts of the stack that are unique to digital assets. For platform capabilities already owned by central security teams (cloud, application security, IAM, SOC), you'll define the crypto-specific requirements and partner on delivery rather than duplicate ownership. You will work closely with risk, compliance, product and engineering, and report into the central security function.

This is a hands-on senior role for someone who understands that in digital-asset custody, a single key-management failure is a firm-ending event, and who builds controls accordingly.

• 6+ years in information security, including recent experience as a senior security engineer, security architect, or security lead;
• Direct experience securing crypto, digital-asset custody, or a regulated financial platform; strong understanding of blockchain security, wallet architecture and key management;
• Working knowledge of cloud security fundamentals (AWS preferred, Azure/GCP acceptable) in a regulated environment;
• Practical knowledge of security in regulated finance and how controls map to licence conditions (ISO 27001, SOC 2, NIST);
• Experience running threat modelling, risk assessments and incident response;
• Comfortable operating in a matrixed security model - partnering with dedicated IAM, AppSec, SOC and infrastructure security teams rather than owning those functions outright.

• Hands-on Kubernetes, containers, API security and infrastructure as code;
• Python proficiency for automation and scripting;
• Experience running third-party / vendor security assurance;
• Recognised certifications: CISSP, CISM, CCSP, or equivalent;
• Hands-on experience with MPC - based custody, key ceremonies and signing-policy design;
• Familiarity with MiCA, DORA, FCA crypto rules, or comparable digital-asset regimes;
• Background in secure SDLC and DevSecOps (OWASP, secure-by-design);
• Experience with smart contract security review: threat modelling, commissioning and managing external audits, and driving findings through to resolution;
• Experience designing transaction signing and approval flows, so that what a user or operator authorises is provably what gets signed and broadcast;
• Experience reviewing business logic in the money path - withdrawal sequencing, balance idempotency, internal ledger integrity - where the flaw sits in the logic rather than the cryptography;
• Familiarity with supply-chain assurance for crypto-specific dependencies: wallet SDKs, chain libraries, node clients and signing tooling, including pinning, provenance and upgrade discipline;
• Experience defining bug bounty scope for crypto assets, and triaging and calibrating severity for on-chain findings.