Security Engineer - International Crypto

Senior Security Engineer, Crypto Industry

About the Role
The company is a crypto company and they run a multi-tenant platform and need a hands-on engineer to take ownership of the cloud infrastructure, delivery pipelines, identity model, and security program. The environment was built with significant automation. They operate remote-first across Europe and Asia with a small, highly technical team. This is an individual contributor role, not management.

What You’ll Own

• Cloud & Infrastructure: Manage cloud environments, networking, containers, secrets, and cost. Infrastructure-as-code is the only path to change.
• Databases: Administer and optimise document and relational databases. Fix queries, manage credentials, backups, and migrations.
• CI/CD Pipelines: Inherit and audit pipelines across multiple repositories. Own builds, releases, approvals, and agent capacity.
• Identity & Access: Own app registrations, roles, managed identities, and service-to-service flows. Build external customer identity.
• Security Program: Build continuous security from scratch — SAST, dependency scanning, secret detection, container/IaC scanning, DAST. Introduce a control framework and evidence trail.
• Codebase: Read Java/Spring and React code. Diagnose failures, fix small bugs, write tests, and keep suites reliable.

What We’re Looking For

• Deep experience with a major cloud provider and infrastructure-as-code.
• Strong identity expertise
• DevSecOps toolchain experience.
• CI/CD pipelines (Azure DevOps, GitHub Actions, or GitLab CI).
• JVM coding ability (Java/Spring) and basic front-end (React/TypeScript).
• Database operations (document and relational).
• Security compliance familiarity (SOC 2, ISO 27001, NIST).
• Comfort reviewing AI-generated code.
• Strong documentation habits.

Bonus

• Regulated industry background.
• Cloud certifications.
• Kubernetes/Helm.
• Control framework implementation experience.