Crypto Security Lead – Digital Assets & Custody

Capital Com SV Investments Limited; Dubai; On-site; AED 700,000 - 1,000,000; Full time

Benefits offered by this job

Competitive Salary

Work-Life Harmony

Generous Time Off

Employee Referral Program

Health & Pension Benefits

Workation 30 days

Volunteer Days

Job summary

Capital Com SV Investments Limited seeks a Principal Security Engineer with deep crypto domain expertise to lead security across its regulated digital-asset business, including custody and on-chain services. You will own the crypto platform's custody and on-chain security end-to-end, and partner with InfraSec, AppSec and IAM for shared controls.

This hands-on senior role requires expertise in MPC, key management, secure SDLC, and risk management to ensure regulatory assurance and robust

Qualifications

• 6+ years in information security, with senior security engineer/architect experience.
• Direct experience securing crypto, digital-asset custody, or regulated platforms.
• Cloud security fundamentals (AWS preferred, Azure/GCP acceptable) in regulated environments.
• Knowledge of ISO 27001, SOC 2, NIST and how controls map to licences.
• Experience running threat modelling, risk assessments and incident response.
• Comfort operating in a matrixed security model with cross-functional teams.

Responsibilities

• Own custody stack security: MPC key management, signing quorums, withdrawal controls.
• Define crypto-specific hardening requirements for custody and exchange stack.
• Embed crypto checks into SDLC with SAST/DAST/CI/CD gates.
• Oversee privileged access and secrets governance for signing keys.
• Define detection use cases for custody and blockchain in SOC monitoring.
• Lead incident response for crypto-specific scenarios and vendor risk reviews.
• Maintain crypto policy addenda and support audits and regulatory mapping.

Skills

Security leadership

Crypto security

Cloud security

Threat modelling

Incident response

Regulatory controls

Tools

Kubernetes

SAST

DAST

SCA

CI/CD security

Job description

Capital Com SV Investments Limited seeks a Principal Security Engineer with deep crypto domain expertise to lead security across its regulated digital-asset business, including custody and on-chain services. You will own the crypto platform's custody and on-chain security end-to-end, and partner with InfraSec, AppSec and IAM for shared controls.

This hands-on senior role requires expertise in MPC, key management, secure SDLC, and risk management to ensure regulatory assurance and robust