Principal Crypto Security Architect (Custody & On-Chain)

Capital.com; Dubai; On-site; AED 500,000 - 900,000; Full time

Benefits offered by this job

Competitive Salary

Work-Life Harmony

Generous Time Off

Employee Referral Program

Health & Pension Benefits

Workation

Volunteer Days

Job summary

Capital.com in the UAE seeks a Principal Security Engineer to own crypto custody security across our digital-asset stack, including on-chain paths, wallets, and key management. You will collaborate with InfraSec, AppSec, IAM, and risk/compliance teams in a regulated environment to ensure robust controls and regulatory alignment.

The role emphasizes hands-on leadership in security architecture, threat modelling, and incident response for crypto-related scenarios, with a focus on safeguarding the

Qualifications

• 6+ years in information security including senior security engineer/architect roles
• Direct experience securing crypto custody or regulated platforms with blockchain awareness
• Cloud security fundamentals in regulated environments (AWS preferred)
• Knowledge of ISO 27001 SOC 2 NIST; familiarity with licensing conditions

Responsibilities

• Own full custody stack security controls (MPC, key management, withdrawal controls)
• Define crypto-specific hardening requirements for custody and exchange in multi-account AWS
• Embed crypto checks into SDLC (SAST/DAST/SCA, CI/CD gates)
• Define custody and blockchain detection use cases for SOC monitoring
• Own incident response for on-chain crypto scenarios and coordinate with CorpSec
• Vendor security assurance for crypto vendor engagements
• Maintain crypto security policy mapping to MiCA, DORA and FCA rules

Skills

Info security

Crypto security

Cloud security

Regulated finance

Threat modelling

Matrixed security model

Job description

Capital.com in the UAE seeks a Principal Security Engineer to own crypto custody security across our digital-asset stack, including on-chain paths, wallets, and key management. You will collaborate with InfraSec, AppSec, IAM, and risk/compliance teams in a regulated environment to ensure robust controls and regulatory alignment.

The role emphasizes hands-on leadership in security architecture, threat modelling, and incident response for crypto-related scenarios, with a focus on safeguarding the