Principal Security Engineer Crypto Digital Assets

Role Overview

Digital Asset and Custody Security

• Own MPC key management, transaction authorisation, signing quorums, address whitelisting, and withdrawal controls.
• Govern hot and cold wallet segregation, key ceremonies, and delegated cold custodians.
• Secure staking architecture and on-chain deposit and withdrawal paths.

Platform and Application Security

• Define crypto-specific hardening requirements for custody and exchange services in the AWS environment.
• Partner on account segmentation, network controls, data residency, secure SDLC checks, privileged access, and secrets governance.

Detection, Response, and Testing

• Define custody and blockchain detection use cases for SOC monitoring and alerting.
• Own response to key compromise, unauthorised transactions, and on-chain incidents.
• Contribute custody and blockchain scenarios to penetration testing and red-team programmes.

Vendor and Regulatory Governance

• Own assurance of custody, execution, blockchain analytics, Travel Rule, and treasury vendors.
• Map crypto controls to MiCA, DORA, FCA rules, ISO 27001, SOC 2, NIST CSF, and GDPR.
• Maintain crypto-specific policies and support regulatory and IT audits.

Required Qualifications

• At least 6 years of information security experience with recent senior engineering, architecture, or security lead work.
• Direct experience securing crypto, digital-asset custody, or a regulated financial platform.
• Strong blockchain security, wallet architecture, and key management knowledge.
• Cloud security fundamentals in a regulated environment, with AWS preferred and Azure or GCP acceptable.
• Experience with threat modelling, risk assessments, and incident response.
• Ability to work in a matrixed security model with dedicated specialist teams.

Preferred Qualifications

• Kubernetes, containers, API security, infrastructure-as-code, or Python experience.
• CISSP, CISM, CCSP, or equivalent certification.
• MPC custody, key ceremonies, signing-policy design, smart contract security, or vendor assurance experience.
• Familiarity with MiCA, DORA, FCA crypto rules, secure SDLC, or DevSecOps.

Benefits

• The posting describes competitive salary, annual leave, health and pension benefits, referral rewards, volunteer days, and location-specific benefits.
• It also describes up to 30 additional days to work remotely from anywhere in the world, subject to restrictions.