Principal Security Engineer Crypto Digital Assets

About the role

We are seeking a Principal Security Engineer with deep crypto domain expertise to own the security of our regulated digital-asset platform. You will be responsible for the end-to-end security of custody, on-chain services and related infrastructure, partnering with central security teams and business units.

Key responsibilities

• Design, implement and operate the full custody stack, including MPC key management, transaction authorisation, signing quorums, address whitelisting and withdrawal controls.
• Define crypto-specific hardening requirements for AWS accounts, network segmentation and data-residency, and embed them into the SDLC.
• Partner with SOC, CorpSec and AppSec to create detection use cases, lead incident response for key compromise or on-chain events, and integrate crypto scenarios into pentest and red-team programmes.
• Own security assessments of third-party crypto vendors and ensure compliance with MiCA, DORA, FCA and internal frameworks such as ISO 27001, SOC 2 and NIST CSF.

Required profile

• 6+ years of information security experience, including senior engineering or architecture roles.
• Hands-on experience securing crypto custody platforms, wallets, key-management ceremonies and regulated financial services.
• Proven ability to work in a matrixed environment with IAM, AppSec, SOC and infrastructure security teams.

Required skills

• MPC key management
• AWS cloud security
• Kubernetes and container security
• Python scripting
• CI/CD pipelines with SAST, DAST and SCA
• IAM and privileged access management

What we offer

• Competitive salary paid in AED
• Generous annual leave and additional volunteer days
• Comprehensive health insurance and pension plans
• 30 extra “workation” days to work remotely from anywhere (subject to restrictions)
• Employee referral bonuses and a supportive work‑life balance culture