Security Engineer

Locations

New York City, London, Singapore or Dubai

Overview

My client is a global trading firm focused on systematic trading and venture investing - all within the digital assets space. They are seeking a security engineer with 3-15 years of experience to protect and enhance the security of trading infrastructure, internal systems, and crypto operations. This role combines traditional systems security, application and network defense, and blockchain-specific threat modeling. You'll work closely with infrastructure, software, and trading teams to ensure the highest standards of security across the on-prem and cloud environments.

Key Responsibilities

Design, implement, and maintain security controls across Linux-based trading and research environments.

Lead efforts in system hardening, network segmentation, identity management, and incident response.

Develop and manage detection, monitoring, and alerting systems for system and crypto-specific threats.

Conduct regular vulnerability assessments, threat modeling, and penetration testing across infrastructure and smart contract interfaces.

Secure integration points between on-prem, cloud, and crypto custody systems (e.g. HSMs, MPC wallets).

Collaborate with developers to ensure security best practices in code, build pipelines, and container environments.

Investigate security incidents and perform forensic analysis when required.

Automate routine security operations using Python, Bash, or Ansible.

Manage compliance and operational controls for key exchanges, APIs, and wallets used in trading operations.

Required Qualifications

3-15 years of experience in security engineering or systems administration in Linux environments (Rocky Linux preferred).

Deep understanding of network security, firewalling, VPNs, and intrusion detection systems.

Proven experience with cloud security (AWS preferred), including IAM, key management, and VPC hardening.

Strong knowledge of Linux hardening, system logging, patch management, and secure automation.

Strong scripting and automation skills in Python, Bash, or Ansible.

Preferred Skills

Knowledge of crypto-specific attack surfaces - exchange API security, private key management, and wallet infrastructure.

Deep understanding of private key management:

Best practices for storage, encryption, retrieval, signing, and generating private keys

Familiarity with hardware wallets and multi-sig solutions such as Gnosis Safe and Squads

Best practices for cold storage

Familiarity with the programming model of the primary blockchains including EVM and Solana.

Understanding of Solidity (and/or Vyper) programming.

Familiarity with common vulnerabilities (e.g. reentrancy, integer overflows, flash loan exploits, front-running/MEV, access control flaws).

Experience conducting audits or using automated tools (Slither, MythX, Echidna, Foundry).

Ability to reason about state changes, upgradeability, and complex financial logic in contracts.

Blockchain & Protocol Layer Knowledge

Understanding how Ethereum and Solana work at the consensus and execution layer.

Awareness of cross-chain bridges, their security assumptions, and risks.

Ability to evaluate protocol designs (DEXes, lending platforms, stablecoins) for systemic weaknesses.

Experience securing blockchain nodes, custody systems, or trading bots.

Background in low-latency or high-performance trading environments.

Experience conducting security audits, code reviews, or penetration testing in production environments.

Awareness of relevant compliance frameworks (SOC2, ISO 27001) in trading or financial contexts.

Soft Skills & Culture Fit

Analytical and methodical problem-solver with a proactive mindset.

Comfortable in high-pressure, real-time trading environments.

Strong communication skills, with the ability to collaborate across infrastructure, trading, and software teams.

Desire to continually improve and automate - security as code mindset.

A close-knit team that values:

High ownership and initiative

Curiosity, intellectual honesty, and rapid learning

Clear, direct communication

Working together toward shared goals - no ego, no politics

Hiring people who love building, solving, and improving - and who want to learn from and contribute to a team of exceptional peers.

Compensation & Benefits

Very competitive compensation, with strong upside based on contribution and performance

Competitive holiday allowance

Free daily Deliveroo lunch

High-spec office and technology

Team socials

Global company offsites and development opportunities