Senior Security Specialist (Crypto Job UAE/Dubai,IT/Tech

Senior Security Specialist (Crypto at Capital)

Capital is on the lookout for a seasoned security professional to lead the safeguarding of our regulated digital asset platform. In this pivotal role, you will be responsible for the security architecture associated with our custody, staking, and trading services. You will work closely with various internal teams to ensure that our infrastructure adheres to the highest security standards.

Key facts

Location:

Dubai Engagement:
Hybrid Team:
Central Security Function

What you'll do

Oversee the comprehensive custody stack, which includes managing Multi-Party Computation (MPC) key management, transaction signing processes, and withdrawal protocols.
Ensure the segregation of wallets, conduct key ceremonies, and maintain the security of on-chain deposit and withdrawal pathways.
Establish specific hardening protocols for AWS environments tailored to cryptocurrency and incorporate security assessments into the Software Development Life Cycle (SDLC).
Lead incident response efforts for cryptocurrency-specific threats, including key compromises and unauthorized transactions.
Conduct thorough security evaluations of third-party vendors, including custody platforms and blockchain analytics services.
Align internal controls with regulatory standards such as MiCA, DORA, and FCA requirements to ensure compliance.
Collaborate with cross-functional teams to implement security best practices and promote a culture of security awareness throughout the organization.
Stay updated on the latest trends and threats in the cryptocurrency space to proactively enhance security measures.

Requirements

A minimum of 6 years of experience in information security, with a focus on roles such as senior engineer, architect, or lead.
Demonstrated expertise in securing digital asset custody solutions or regulated financial platforms.
Strong technical knowledge of blockchain security principles, wallet architecture, and key management practices.
Familiarity with cloud security concepts, particularly within AWS environments.
Understanding of various security frameworks, including ISO 27001, SOC 2, and NIST standards.
Proven ability to conduct threat modeling, perform risk assessments, and manage incident response activities effectively.
Experience working in a matrixed security environment alongside specialized teams in Identity and Access Management (IAM), Application Security (App Sec), and Security Operations Center (SOC).

Nice to have

Experience with Kubernetes, container security, API security, and infrastructure as code practices.
Proficiency in Python for scripting and automation tasks.
Background in vendor security assurance processes.
Relevant professional certifications such as CISSP, CISM, or CCSP.
Practical experience with MPC-based custody solutions and the design of signing policies.
Knowledge of MiCA, DORA, and FCA regulations related to cryptocurrency.
Experience in Dev Sec Ops and secure software development practices.
Familiarity with smart contract security assessments and managing external audits.
Ability to analyze business logic for ledger integrity and withdrawal sequencing.
Experience in supply-chain assurance for wallet SDKs and node clients.
Understanding of managing bug bounty programs for on-chain assets.

Skills & tools

AWS - MPC Key Management
- Blockchain Security
- Regulatory Compliance (MiCA, DORA, FCA, ISO 27001, SOC
2) - Threat Modeling
- Incident Response

Practical notes

The compensation package includes a competitive salary, pension contributions, and comprehensive medical insurance coverage.
Additional benefits feature a generous annual leave policy, an employee referral program, and two paid volunteer days each year.
Employees have the option to take advantage of a workation policy, allowing for up to 30 days of remote work from any location annually, subject to specific restrictions.

Join Capital and be a part of a dynamic team that is at the forefront of securing digital assets in a rapidly evolving landscape. Your expertise will play a crucial role in shaping the future of our security posture and ensuring the trust of our clients in our digital asset offerings.

#J-18808-Ljbffr