Security Engineer — FinOps & Trading Infrastructure

Blockchain.com; Paris; Vor Ort; EUR 120.000 - 170.000; Vollzeit

Benefits dieser Stelle

Unlimited vacation

Unlimited books

Apple equipment

Role based in Paris office – 4 days in

Work from Anywhere up to 20 days/yr

Zusammenfassung

Blockchain is seeking a hands-on Security Engineer embedded with the Institutional Trading and FinOps team in Paris. You will own the secure operation of off‑chain trading processes and infrastructure, focusing on risk assessments, control implementation, and automation to detect anomalies.

You will collaborate with Trading, Middle Office and Quant teams to map data flows, define the target state, and drive posture uplifts with third‑party vendors and CI/CD integrations.

Qualifikationen

• 5+ years in security engineering, platform security, or application security.
• Threat modeling experience with STRIDE on data flows and workflows.
• Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules.
• Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/GCP KMS), IAM patterns and least-privilege.
• Exceptional ability to translate “Technical Debt” into Business Risk for C-suite stakeholders.
• Ability to raise, read and audit Pull Requests in TypeScript, Java/Kotlin, Python.
• Experience conducting technical due diligence for third-party security integrations.

Aufgaben

• Partner with Trading, Middle Office and Quant teams to map inventory trading systems, data flows, third-party integrations and custody/settlement touchpoints.
• Conduct deep-dive assessments mapping critical assets and workflows to identify structural vulnerabilities and define the Target State with RTPs.
• Act as security liaison for Senior Management and vendors; translate gaps into business risk summaries and drive vendor evaluations.
• Implement and maintain monitoring for FinOps security signals; integrate into SIEM/SOAR for real-time response.
• Assist with secrets and key-management hygiene; ensure keys stored in KMS/Vault with least privilege and rotation.
• Triage SAST/SCA findings; help implement CI checks and remediation playbooks.
• Participate in incident exercises and remediation tracking for trading incidents.
• Document controls and produce risk summaries for FinOps leads and Security.
• AI‑Driven Innovation: research and embed AI utilities and LLM agents into secure infrastructure.

Kenntnisse

Security engineering

Threat modeling

Observability/detection

Secrets management

Executive risk communication

PR review (TS/Java/Python)

Third-party security due diligence

Tools

SIEM

Vault

KMS (AWS/GCP)

1Password

Jobbeschreibung

Blockchain is seeking a hands-on Security Engineer embedded with the Institutional Trading and FinOps team in Paris. You will own the secure operation of off‑chain trading processes and infrastructure, focusing on risk assessments, control implementation, and automation to detect anomalies.

You will collaborate with Trading, Middle Office and Quant teams to map data flows, define the target state, and drive posture uplifts with third‑party vendors and CI/CD integrations.