We are looking for a Senior Security Specialist with deep crypto domain expertise to lead security across our regulated digital-asset business in Dubai. As we build out spot trading, custody, staking, and on-chain services for our client base, security is the foundation the whole business stands on. This role owns it. You will be the security owner for our crypto platform end to end: architecture, engineering, operations, and regulatory assurance. You’ll secure a greenfield, cloud-native exchange and custody stack, protect client digital assets and private key material, and make sure our controls stand up to regulators across multiple jurisdictions. You will work closely with risk, compliance, product and engineering, and report into the central security function. This is a hands-on senior role for someone who understands that in digital-asset custody, a single key-management failure is a firm-ending event, and who builds controls accordingly.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Key Responsibilities
- Digital asset and custody security: Own the full custody stack: MPC/HSM key management, transaction authorisation, signing quorums, address whitelisting and withdrawal controls; govern hot/cold wallet segregation, key ceremonies, and delegated cold custodians; secure staking architecture and on-chain deposit/withdrawal paths.
- Platform, cloud and application security: Design and run cloud security across a multi-account AWS environment, secure the Kubernetes platform and embed DevSecOps into the SDLC.
- Threat detection, response and testing: Stand up and run threat detection, own incident response end to end and execute vulnerability management, pen testing and red-teaming.
- Third-party and vendor security: Own security assessment and ongoing assurance of the vendor stack; set security requirements for vendor onboarding and contracts.
- Regulatory, resilience and governance: Map controls against MiCA, DORA, FCA, GDPR and maintain the security policy suite and control framework.
- AI security: Secure LLM integrations and AI-enabled automation against prompt injection and data leakage.
Required Qualifications
- 6+ years in information security with recent experience as a senior security engineer or architect.
- Direct experience in securing crypto or regulated financial platforms; strong understanding of blockchain security and key management.
- Strong cloud security background on AWS; hands-on with Kubernetes, API security, and infrastructure as code.
- Experience running threat modelling, risk assessments, incident response and third-party security assurance.
Preferred Qualifications
- Recognised certifications: CISSP, CISM, CCSP, or equivalent.
- Familiarity with MiCA, FCA crypto rules, or comparable digital-asset regimes; exposure to AI security and ML pipelines.
Soft Skills
- Strong analytical and problem-solving skills; able to translate technical risk into business impact.
What You Will Get in Return
- Competitive salary and work-life harmony, with generous time off and comprehensive health benefits.
- Opportunity for a workation with an additional 30 days to work remotely.
- Two additional paid days each year for volunteering and supporting community causes.
