Capital.com

3 days ago

Senior Security Specialist (Crypto / Digital Assets)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Own security end to end for a cloud-native crypto platform across spot trading, custody, and staking—covering architecture, engineering, operations, and regulatory assurance. Lead custody security (MPC/HSM, key management, withdrawal controls), platform and DevSecOps practices (SAST/DAST/SCA, IAM, secrets governance), and threat detection and incident response. Drive vulnerability testing, vendor security assurance, and map controls to MiCA/DORA/FCA/GDPR using recognized standards.

Location: Dubai

Workplace: Hybrid

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Own the full custody stack security: MPC/HSM key management, transaction authorization, signing quorums, address whitelisting, withdrawal controls, and hot/cold wallet segregation.
•Design and run cloud and application security across a multi-account AWS environment, securing Kubernetes, event-streaming, and database architecture; embed DevSecOps across the SDLC.
•Stand up threat detection, monitoring, alerting, and run end-to-end incident response including playbooks, forensics, breach notification, and post-incident reviews.
•Lead vulnerability management, pen testing, and red-teaming with custody- and blockchain-specific scenarios.
•Own regulatory, resilience, and governance security controls (MiCA, DORA, FCA, GDPR; ISO 27001, SOC 2, NIST CSF), including operational resilience (BC/DR) and vendor security assurance.

Pay and Benefits

Perks:Health InsurancePensionRemote WorkPaid Leave

Key Requirements

•6+ years in information security, with recent experience as a senior security engineer, security architect, or security lead.
•Experience securing crypto/digital-asset custody or a regulated financial platform, including blockchain security, wallet architecture, and key management.
•Strong cloud security background on AWS (Azure/GCP also useful) plus hands-on Kubernetes, containers, API security, and infrastructure as code.
•Practical knowledge of security in regulated finance and mapping controls to license conditions (ISO 27001, SOC 2, NIST).
•Experience with threat modelling, risk assessments, incident response, and third-party security assurance; Python proficiency for automation and scripting.

Experience:6+ yearsInformation securityCryptoDigital assetsRegulated financeBlockchainCloud

Skills:Analytical thinkingProblem-solvingRisk communicationCross-functional collaborationDocumentation

Certifications:CISSPCISMCCSP

Tech Stack:MPCHSMAWSKubernetesContainersAPI securityInfrastructure as codeDevSecOpsSDLCSASTDASTSCASecrets managementCI/CDIAMPrivileged accessLLMRAGPrompt injectionMFA

Company Brief

Capital.com

Operates an online trading platform offering CFDs, forex, commodities, indices and cryptocurrencies to retail investors and traders, combining market access with educational content, analytics, and AI-driven insights for informed trading decisions.

Industry: Trading Platforms

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Headquarters: London, United Kingdom

Founded: 2016

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Capital.com

3 days ago

Senior Security Specialist (Crypto / Digital Assets)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Dubai

Workplace: Hybrid

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Own the full custody stack security: MPC/HSM key management, transaction authorization, signing quorums, address whitelisting, withdrawal controls, and hot/cold wallet segregation.
•Design and run cloud and application security across a multi-account AWS environment, securing Kubernetes, event-streaming, and database architecture; embed DevSecOps across the SDLC.
•Stand up threat detection, monitoring, alerting, and run end-to-end incident response including playbooks, forensics, breach notification, and post-incident reviews.
•Lead vulnerability management, pen testing, and red-teaming with custody- and blockchain-specific scenarios.
•Own regulatory, resilience, and governance security controls (MiCA, DORA, FCA, GDPR; ISO 27001, SOC 2, NIST CSF), including operational resilience (BC/DR) and vendor security assurance.

Pay and Benefits

Perks:Health InsurancePensionRemote WorkPaid Leave

Key Requirements

•6+ years in information security, with recent experience as a senior security engineer, security architect, or security lead.
•Experience securing crypto/digital-asset custody or a regulated financial platform, including blockchain security, wallet architecture, and key management.
•Strong cloud security background on AWS (Azure/GCP also useful) plus hands-on Kubernetes, containers, API security, and infrastructure as code.
•Practical knowledge of security in regulated finance and mapping controls to license conditions (ISO 27001, SOC 2, NIST).
•Experience with threat modelling, risk assessments, incident response, and third-party security assurance; Python proficiency for automation and scripting.

Experience:6+ yearsInformation securityCryptoDigital assetsRegulated financeBlockchainCloud

Skills:Analytical thinkingProblem-solvingRisk communicationCross-functional collaborationDocumentation

Certifications:CISSPCISMCCSP

Tech Stack:MPCHSMAWSKubernetesContainersAPI securityInfrastructure as codeDevSecOpsSDLCSASTDASTSCASecrets managementCI/CDIAMPrivileged accessLLMRAGPrompt injectionMFA

Company Brief

Capital.com

Industry: Trading Platforms

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Headquarters: London, United Kingdom

Founded: 2016

Website LinkedIn