Security Engineer, Institutional Trading

You’ll be the hands-on security engineer embedded with the Institutional Trading and Financial Operations (FinOps) team. Your focus is the secure operation of off-chain trading processes and infrastructure that empowers our institutional business: integrations, signing flows, key custody interfaces, middle-office workflows, order routing and settle pipelines that handle significant capital. You will support risk assessments, operating controls, automation to detect operational anomalies and remediation coordination. This is a high-visibility role where you will focus on operational security engineering - ensuring that the tools and processes our traders use are resilient against both external threats and internal errors. This role does not require smart-contract auditing.

Responsibilities

Partner with Trading, Middle Office and Quant (Institutional FinOps) teams to map out inventory trading systems, data flows, third-party integrations and custody/settlement touchpoints; Conduct deep-dive assessments mapping critical assets and workflows to identify structural vulnerabilities. Define target state and draft strategic Risk Treatment Plans (RTP) required to meet institutional-grade standards (e.g., CCSS, NIST, DORA); Act as primary security liaison for Senior Management and third-party vendors. Translate complex technical gaps into actionable business risk summaries, drive vendor evaluations for core security infrastructure, and manage project lifecycle for high-impact posture uplifts; Implement and maintain monitoring for FinOps-specific security signals such as abnormal order patterns, signature misuse, unusual settlements. Integrate signals into SIEM/SOAR for real-time response; Support secrets and key-management hygiene. Ensure app/service keys are stored in KMS/Vault, scoped to least privilege and rotated automatically to prevent credential leakage; Assist product security in triage of SAST/SCA findings for FinOps-related repositories. Help implement CI checks and remediation playbooks; Participate in incident exercises, post-incident reviews and remediation tracking for trading incidents; Document controls and produce concise risk summaries for FinOps leads and the Security; Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into secure infrastructure

Requirements

5+ years in security engineering, platform security, or application security experience; Proven expertise in Threat Modeling. Ability to perform structured reviews (e.g., STRIDE) of complex data flows and operational processes; Experience with observability and detection tooling (SIEM, logs, metrics) and ability to write basic detection rules; Practical experience with KMS/HSM, secrets management platforms (Vault, 1Password, AWS/GCP KMS), IAM patterns and least-privilege; Exceptional ability to translate "Technical Debt" into Business Risk for C-suite stakeholders (CFO, CTO, Head of Trading); Ability to raise, read and audit Pull Requests in at least one language used in our stack (TypeScript, Java/Kotlin, Python); Experience conducting technical due diligence and scoping for third-party security integrations

Nice to have

Familiarity with trading systems or financial operations (market-making, execution, settlement) or close collaboration background with trading/quant teams; Exposure to blockchain on-chain concepts (wallets, addresses, transactions) but no requirement to audit contracts; Familiarity with SOC operations, and post-incident forensic analysis; Familiarity with SOC2, ISO 27001, or financial audit requirements; Any relevant industry certification

Benefits

Full-time salary based on experience; Meaningful equity in an industry-leading company; Work from Anywhere Policy: up to 20 days per year; ClassPass; Unlimited vacation policy; Apple equipment; Opportunity to be a key player and build your career at a rapidly expanding global technology company; Flexible work culture