Crypto Custody Security Architect

Capital.com; Dubai; On-site; AED 600,000 - 1,200,000; Full time

Benefits offered by this job

Competitive Salary

Work-Life Harmony

Generous Time Off

Health & Pension Benefits

Workation / remote-friendly policy

Volunteer Days

Job summary

Capital.com is seeking a Senior Security Specialist with deep crypto domain expertise to lead security across our regulated digital-asset business in Dubai. You will own custody/security for on-chain layers and coordinate with InfraSec, AppSec and IAM to secure the platform.

The role focuses on MPC key management, custody controls, incident response, and regulatory assurance for MiCA, DORA, and FCA rules. A hands-on leader will drive crypto security end-to-end.

Qualifications

• 6+ years in information security, with recent senior roles such as security engineer, architect or lead.
• Direct experience securing crypto, digital-asset custody, or a regulated financial platform; strong blockchain security understanding.
• Working knowledge of cloud security fundamentals (AWS preferred, Azure/GCP acceptable) in a regulated environment.
• Practical knowledge of security in regulated finance and how controls map to licence conditions (ISO 27001, SOC 2, NIST).
• Experience running threat modelling, risk assessments and incident response.
• Comfortable operating in a matrixed security model with cross-functional partners.

Responsibilities

• Own custody security stack for crypto platform: MPC key management, transaction authorisation, signing quorums, address whitelisting and withdrawal controls.
• Define crypto-specific hardening requirements for custody and exchange stack within the AWS multi-account environment; collaborate on network and data residency controls.
• Embed crypto-specific checks into SDLC (SAST, DAST, SCA, CI/CD security gates) for custody and exchange services.
• Define detection use cases for custody/blockchain and feed them to SOC monitoring and alerting; lead incident response for crypto-specific scenarios.
• Apply vendor onboarding and contract security processes to crypto vendor engagements.
• Map crypto controls to MiCA, DORA, FCA rules; align with ISO 27001, SOC 2, NIST CSF and GDPR mappings.

Skills

Crypto security

Cloud security (AWS)

Threat modelling

Incident response

Regulatory/compliance knowledge

Cross-functional collaboration

Tools

AWS

Azure/GCP

SAST/DAST/SCAs

Job description

Capital.com is seeking a Senior Security Specialist with deep crypto domain expertise to lead security across our regulated digital-asset business in Dubai. You will own custody/security for on-chain layers and coordinate with InfraSec, AppSec and IAM to secure the platform.

The role focuses on MPC key management, custody controls, incident response, and regulatory assurance for MiCA, DORA, and FCA rules. A hands-on leader will drive crypto security end-to-end.