Security Engineer, Institutional Trading

As a Security Engineer for Institutional Trading at Blockchain.com, you'll be the hands-on security engineer embedded with the Institutional Trading and Financial Operations (FinOps) team. You'll focus on the secure operation of off-chain trading processes and infrastructure that power institutional business: integrations, signing flows, key custody interfaces, middle-office workflows, order routing and settlement pipelines handling significant capital. This is a high-visibility role centred on operational security engineering, ensuring the tools and processes traders use are resilient against both external threats and internal errors.

What you'll do

• Partner with Trading, Middle Office and Quant teams to map inventory trading systems, data flows, third-party integrations and custody/settlement touchpoints.
• Conduct deep-dive assessments to identify structural vulnerabilities, define the Target State and draft strategic Risk Treatment Plans (RTP) required to meet institutional-grade standards such as CCSS, NIST and DORA.
• Act as the primary security liaison for Senior Management and third-party vendors, translating complex technical gaps into actionable business risk summaries and managing vendor evaluations and project lifecycles for high-impact security uplifts.
• Implement and maintain monitoring for FinOps-specific security signals such as abnormal order patterns, signature misuse and unusual settlements, integrating these into your SIEM/SOAR for real-time response.
• Support secrets and key management hygiene, ensuring app and service keys are stored in KMS/Vault, scoped to least privilege and rotated automatically to prevent credential leakage.
• Assist product security in triaging SAST/SCA findings for FinOps-related repositories and implement CI checks and remediation playbooks.
• Participate in incident exercises, post-incident reviews and remediation tracking for trading incidents.
• Document controls and produce concise risk summaries for FinOps leads and the security team.
• Research, architect and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into secure infrastructure.

What you bring

• 5+ years in security engineering, platform security or application security.
• Proven expertise in Threat Modeling and ability to perform structured reviews such as STRIDE of complex data flows and operational processes.
• Experience with observability and detection tooling (SIEM, logs, metrics) and the ability to write basic detection rules.
• Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/GCP KMS), IAM patterns and least-privilege principles.
• Exceptional ability to translate technical debt into business risk for C-suite stakeholders (CFO, CTO, Head of Trading).
• Ability to raise, read and audit Pull Requests in at least one language used in the stack (TypeScript, Java/Kotlin, Python).
• Experience conducting technical due diligence and scoping for third-party security integrations.

Nice to have

• Familiarity with trading systems or financial operations such as market-making, execution and settlement, or close collaboration background with trading and quant teams.
• Exposure to blockchain on-chain concepts (wallets, addresses, transactions), though no requirement to audit smart contracts.
• Familiarity with SOC operations and post-incident forensic analysis.
• Familiarity with SOC2, ISO 27001 or financial audit requirements.
• Relevant industry certification.

What we offer

• Unlimited vacation policy.
• Unlimited books policy to order technical resources or access the company library.
• Apple equipment.
• Full-time salary based on experience and meaningful equity in the company.
• Role based in the Paris office with mandatory in-office presence four days per week.
• Work from Anywhere Policy allowing remote work from anywhere globally for up to 20 days per year.

About Blockchain.com

Blockchain.com is the most trusted and fastest-growing global crypto company, helping millions of people safely access cryptocurrency. Since 2011, it has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.