Principal Security Engineer (Crypto / Digital Assets)

Capital.com
Dubai, Cyprus
Workplace: HybridFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 6+ yearsSkills: ["Analytical thinking","Problem-solving","Risk communication","Cross-functional collaboration","Documentation"]

Own security end to end for a cloud-native crypto platform across spot trading, custody, and staking—covering architecture, engineering, operations, and regulatory assurance. Lead custody security (MPC/HSM, key management, withdrawal controls), platform and DevSecOps practices (SAST/DAST/SCA, IAM, secrets governance), and threat detection and incident response. Drive vulnerability testing, vendor security assurance, and map controls to MiCA/DORA/FCA/GDPR using recognized standards.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Capital.com
Capital.com
1 month ago

Principal Security Engineer (Crypto / Digital Assets)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Own security end to end for a cloud-native crypto platform across spot trading, custody, and staking—covering architecture, engineering, operations, and regulatory assurance. Lead custody security (MPC/HSM, key management, withdrawal controls), platform and DevSecOps practices (SAST/DAST/SCA, IAM, secrets governance), and threat detection and incident response. Drive vulnerability testing, vendor security assurance, and map controls to MiCA/DORA/FCA/GDPR using recognized standards.
Location: Dubai, Cyprus
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Own the full custody stack security: MPC/HSM key management, transaction authorization, signing quorums, address whitelisting, withdrawal controls, and hot/cold wallet segregation.
  • •Design and run cloud and application security across a multi-account AWS environment, securing Kubernetes, event-streaming, and database architecture; embed DevSecOps across the SDLC.
  • •Stand up threat detection, monitoring, alerting, and run end-to-end incident response including playbooks, forensics, breach notification, and post-incident reviews.
  • •Lead vulnerability management, pen testing, and red-teaming with custody- and blockchain-specific scenarios.
  • •Own regulatory, resilience, and governance security controls (MiCA, DORA, FCA, GDPR; ISO 27001, SOC 2, NIST CSF), including operational resilience (BC/DR) and vendor security assurance.

Pay and Benefits

Perks:Health InsurancePensionRemote WorkPaid Leave

Key Requirements

  • •6+ years in information security, with recent experience as a senior security engineer, security architect, or security lead.
  • •Experience securing crypto/digital-asset custody or a regulated financial platform, including blockchain security, wallet architecture, and key management.
  • •Strong cloud security background on AWS (Azure/GCP also useful) plus hands-on Kubernetes, containers, API security, and infrastructure as code.
  • •Practical knowledge of security in regulated finance and mapping controls to license conditions (ISO 27001, SOC 2, NIST).
  • •Experience with threat modelling, risk assessments, incident response, and third-party security assurance; Python proficiency for automation and scripting.
Experience:6+ yearsInformation securityCryptoDigital assetsRegulated financeBlockchainCloud
Skills:Analytical thinkingProblem-solvingRisk communicationCross-functional collaborationDocumentation
Certifications:CISSPCISMCCSP
Tech Stack:MPCHSMAWSKubernetesContainersAPI securityInfrastructure as codeDevSecOpsSDLCSASTDASTSCASecrets managementCI/CDIAMPrivileged accessLLMRAGPrompt injectionMFA

Company Brief

Capital.com
Operates an online trading platform offering CFDs, forex, commodities, indices and cryptocurrencies to retail investors and traders, combining market access with educational content, analytics, and AI-driven insights for informed trading decisions.
Industry: Trading Platforms
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Headquarters: London, United Kingdom
Founded: 2016
WebsiteLinkedIn