Senior Security Specialist – Crypto, Digital Assets

Capital.com

Senior Security Specialist leading security across regulated digital-asset business in Dubai. Ensuring robust security for crypto services and compliance with regulations.

Posted 7/27/2026full-timeDubai • 🇦🇪 United Arab EmiratesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing digital asset custody and blockchain environments, with a strong focus on cloud security, incident response, and regulatory compliance. Proficient in implementing DevSecOps practices and managing security across multi-account AWS environments.

Highest-signal resume keywords

Blockchain SecurityCloud Security on AWSIncident Response ManagementDevSecOps IntegrationPython Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Key ManagementThreat ModellingVulnerability ManagementPen TestingRisk AssessmentsAPI SecurityInfrastructure as CodeSecurity Policy DevelopmentData Residency ControlsWallet Architecture

Tools & Technologies

AWSKubernetesContainersCI/CD Security GatesSASTDASTSCAIAMPrivileged Access ManagementBlockchain Analytics

Certifications & Qualifications

ISO 27001SOC 2NIST CSF

Industry Keywords

Digital Asset CustodyRegulated FinanceMiCADORAFCATravel RuleOperational ResilienceBusiness ContinuityDisaster RecoverySecurity Assurance

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesPythonSDLC

About the role

Key responsibilities & impact

Own the full custody stack: MPC/HSM key management, transaction authorisation, signing quorums, address whitelisting and withdrawal controls;
Govern hot/cold wallet segregation, key ceremonies and delegated cold custodians;
Secure staking architecture and on-chain deposit/withdrawal paths.
Design and run cloud security across a multi-account AWS environment: account segmentation, SCPs, network and data-residency controls;
Secure the Kubernetes platform, event-streaming layer and database architecture;
Embed DevSecOps into the SDLC: SAST, DAST, SCA, secrets management and CI/CD security gates; own IAM, privileged access and secrets governance.
Stand up and run threat detection, monitoring and alerting across the estate;
Own incident response end to end: playbooks, forensics, breach notification and post-incident review;
Run vulnerability management, pen testing and red-teaming, including custody- and blockchain-specific scenarios.
Own security assessment and ongoing assurance of the vendor stack: custody platforms, execution systems, blockchain analytics, Travel Rule and treasury tooling;
Set security requirements for vendor onboarding, contracts and outsourcing arrangements.
Map controls against MiCA, DORA, FCA, GDPR and recognised standards (ISO 27001, SOC 2, NIST CSF);
Own operational resilience from a security angle: BC, DR and important business service mapping;
Maintain the security policy suite and control framework; support regulatory and IT audits.
Secure LLM integrations, RAG pipelines and AI-enabled automation against prompt injection, data leakage and over-permissioned agents.

Requirements

What you’ll need

6+ years in information security, including recent experience as a senior security engineer, security architect, or security lead;
Direct experience securing crypto, digital-asset custody, or a regulated financial platform; strong understanding of blockchain security, wallet architecture and key management;
Strong cloud security background on AWS (Azure or GCP also useful); hands-on with Kubernetes, containers, API security and infrastructure as code;
Practical knowledge of security in regulated finance and how controls map to licence conditions (ISO 27001, SOC 2, NIST);
Experience running threat modelling, risk assessments, incident response and third-party security assurance;
Python proficiency for automation and scripting.

Benefits

Comp & perks

Competitive Salary: We believe great work deserves great pay. Your skills and talents will be rewarded with a salary that makes you feel valued and motivated.
Work-Life Harmony: Join a company that genuinely cares about you, because your life outside of work matters just as much as your time on the clock. #LI-Hybrid
Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry.
Employee Referral Program: Love working here? Share the love. Bring your talented friends on board and get rewarded for growing our team.
Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus location-specific benefits and perks.
Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply).
Volunteer Days: Take two additional paid days each year to support causes you care about and give back to the community.