About the Job:
We are looking for a Principal Security Engineer with deep crypto domain expertise to lead security across our regulated digital-asset business. As we build out spot trading, custody, staking, and on-chain services for our client base, security is the foundation the whole business stands on. This role owns it.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
You will be the security owner for our crypto platform's custody and on-chain layer end to end: architecture, engineering, operations, and regulatory assurance for the parts of the stack that are unique to digital assets. For platform capabilities already owned by central security teams (cloud, application security, IAM, SOC), you'll define the crypto-specific requirements and partner on delivery rather than duplicate ownership. You will work closely with risk, compliance, product, and engineering, and report into the central security function.
This is a hands-on senior role for someone who understands that in digital-asset custody, a single key-management failure is a firm-ending event, and who builds controls accordingly.
Key Responsibilities:
-
Digital Asset and Custody Security:
- Own the full custody stack: MPC key management, transaction authorisation, signing quorums, address whitelisting, and withdrawal controls.
- Govern hot/cold wallet segregation, key ceremonies, and delegated cold custodians.
- Secure staking architecture and on-chain deposit/withdrawal paths.
-
Platform, Cloud, and Application Security:
- Define crypto-specific hardening requirements for the custody and exchange stack; partner with security teams on additional control needs.
-
Threat Detection, Response, and Testing:
- Define custody- and blockchain-specific detection use cases for monitoring.
- Own incident response for crypto-specific scenarios and contribute to security testing programs.
-
Third-party and Vendor Security:
- Manage security assessment and ongoing assurance of the crypto vendor stack and ensure compliance processes are upheld.
-
Regulatory, Resilience, and Governance:
- Own control mapping against relevant regulations and support audits on crypto scope.
Required Qualifications:
- 6+ years in information security, including recent experience as a senior security engineer or architect.
- Direct experience securing crypto or digital-asset custody.
- Knowledge of cloud security fundamentals in a regulated environment.
- Familiarity with risk assessments, incident response, and compliance with regulatory frameworks.
Nice to Have:
- Hands-on experience with Kubernetes, API security, Python scripting, and third-party vendor assurance.
- Recognized certifications like CISSP, CISM, or equivalent.
Soft Skills:
- Strong analytical and problem-solving skills.
- Ability to collaborate across functions and communicate effectively about security risks.
What You Will Get in Return:
- Competitive Salary and Generous Time Off.
- Comprehensive Health & Pension Benefits.
- Workation Opportunity for remote working days.
- Employee Referral Program.
- Volunteer Days for community support.
Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity.
