Security Engineer, Institutional Trading

Blockchai; Paris; Sur place; EUR 90 000 - 150 000; Plein temps

Avantages offerts par ce poste

Unlimited vacation

Unlimited books

Equity based compensation

Office in Paris with 4 days in-office

Remote-friendly policy up to 20 days a

Résumé du poste

Blockchain is a global crypto company building secure infrastructure for institutional trading. You will be embedded with the Institutional Trading and FinOps teams to secure off-chain processes, signings, custody interfaces, and settlement pipelines handling substantial capital.

You’ll lead risk assessments, define target state, and implement monitoring, key-management hygiene, and rapid remediation workflows while enabling secure AI integrations into our infrastructure.

Qualifications

• 5+ years in security engineering, platform security, or application security.
• Proven Threat Modeling expertise (STRIDE) on complex data flows.
• Experience with SIEM, logs, metrics and writing detection rules.
• Practical experience with KMS/HSM and secrets management (Vault, 1Password, AWS/GCP KMS).
• Ability to translate Technical Debt into Business Risk for C-suite.
• PRs in at least one stack language (TypeScript, Java/Kotlin, Python).
• Experience due diligence and scoping for third-party security integrations.

Responsabilités

• Partner with Trading, Middle Office and FinOps teams to map trading systems, data flows and custody touchpoints.
• Conduct deep-dive assessments to map assets and workflows and draft RTPs for institutional standards.
• Act as security liaison to Senior Management and vendors; translate gaps into business risk summaries.
• Implement and maintain monitoring for FinOps security signals and integrate into SIEM/SOAR.
• Manage secrets and key-management hygiene with least-privilege access and rotation.
• Assist product security in triage of SAST/SCA findings and CI remediations.
• Participate in incident exercises, post-incident reviews and remediation tracking.
• Document controls and produce risk summaries for FinOps leads.
• AI-Driven Innovation: safely embed AI utilities and LLM agents into secure infra.

Connaissances

Threat modeling

Observability & detection

Security risk translation

CI/CD security

Cross-functional communication

PR review (TypeScript/Java/Python)

Outils

Vault

1Password

KMS (AWS/GCP)

Description du poste

Security Engineer, Institutional Trading

Paris

Blockchain is connecting the world to the future of finance. As the most trusted and fastest-growing global crypto company, it helps millions of people worldwide safely access cryptocurrency. Since its inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.

You’ll be the hands‑on security engineer embedded with the Institutional Trading and Financial Operations (FinOps) team. Your focus is the secure operation of off‑chain trading processes and infrastructure that empowers our institutional business: integrations, signing flows, key custody interfaces, middle‑office workflows, order routing and settle pipelines that handle significant capital. You will support risk assessments, operating controls, automation to detect operational anomalies and remediation coordination. This is a high‑visibility role where you will focus on operational security engineering - ensuring that the tools and processes our traders use are resilient against both external threats and internal errors. This role does not require smart‑contract auditing.

WHAT YOU WILL DO

• Partner with Trading, Middle Office and Quant (Institutional FinOps) teams to map out inventory trading systems, data flows, third‑party integrations and custody/settlement touchpoints.
• Conduct deep-dive assessments mapping critical assets and workflows to identify structural vulnerabilities. You will be responsible for defining the Target State and drafting the strategic Risk Treatment Plans (RTP) required to meet institutional‑grade standards (e.g., CCSS, NIST, DORA).
• Act as the primary security liaison for Senior Management and third‑party vendors. You will translate complex technical gaps into actionable business risk summaries, drive vendor evaluations for core security infrastructure, and manage the project lifecycle for high‑impact posture uplifts.
• Implement and maintain monitoring for FinOps‑specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM/SOAR for real‑time response.
• Support secrets and key‑management hygiene. You will ensure app/service keys are stored in KMS/Vault, scoped to least privilege and rotated automatically to prevent credential leakage.
• Assist product security in triage of SAST/SCA findings for FinOps‑related repositories. You will help implement CI checks and remediation playbooks.
• Participate in incident exercises, post‑incident reviews and remediation tracking for trading incidents.
• Document controls and produce concise risk summaries for FinOps leads and the Security.
• AI‑Driven Innovation: Research, architect, and safely embed cutting‑edge AI utilities and Large Language Model (LLM) agents directly into our secure infrastructure.

WHAT YOU WILL NEED

• 5+ years in security engineering, platform security, or application security experience.
• Proven expertise in Threat Modeling. Ability to perform structured reviews (e.g., STRIDE) of complex data flows and operational processes.
• Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules.
• Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/GCP KMS), IAM patterns and least‑privilege.
• Exceptional ability to translate "Technical Debt" into Business Risk for C‑suite stakeholders (CFO, CTO, Head of Trading).
• Ability to raise, read and audit Pull Requests in at least one language used in our stack (TypeScript, Java/Kotlin, Python).
• Experience conducting technical due diligence and scoping for third‑party security integrations.

NICE TO HAVE

• Familiarity with trading systems or financial operations (market‑making, execution, settlement) or close collaboration background with trading/quant teams.
• Exposure to blockchain on‑chain concepts (wallets, addresses, transactions) but no requirement to audit contracts.
• Familiarity with SOC operations, and post‑incident forensic analysis.
• Familiarity with SOC2, ISO 27001, or financial audit requirements
• Any relevant industry certification

COMPENSATION & PERKS

• Unlimited vacation policy; work hard and take time when you need it.
• Unlimited books policy; order the technical resources you need or simply pick something up from our company library.
• Full‑time salary based on experience and meaningful equity in an industry‑leading company.
• Role based in our Paris office, with a mandatory in‑office presence four days per week
• Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.

Blockchain is committed to diversity and inclusion in the workplace and is proud to be an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, religion, color, national origin, gender, gender expression, sex, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, and apprenticeship. Blockchain makes hiring decisions based solely on qualifications, merit, and business needs at the time.