Назад
Company hidden
6 дней назад

Director, Senior Security Architect (Crypto)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior/director
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Director, Senior Security Architect (Crypto): Designing security defenses for mission-critical trading, web, API, mobile, FIX, and cloud platforms with an accent on threat modeling, application security, offensive security, and cybersecurity architecture. Focus on building AI-powered security tooling, assessing vulnerabilities, leading complex security initiatives, and mentoring engineering teams in a high-stakes financial environment.

Location: SoHo, London; full-time onsite

Company

hirify.global is a media, events, indices, and data company serving the global crypto economy and operating as an independent subsidiary within the Bullish group.

What you will do

  • Build complex threat models for critical systems and define prioritized cybersecurity requirements.
  • Partner with Product, Engineering, and Infrastructure teams to design and ship secure web, API, mobile, FIX, and trading software.
  • Lead global security initiatives and build custom AI-powered tooling to scale the cybersecurity program.
  • Assess vulnerability risks, provide actionable recommendations, and track security health metrics and KPIs for executive reporting.
  • Drive high-impact security projects in a fast-moving environment.
  • Provide technical leadership and mentorship to cybersecurity and engineering teams.

Requirements

  • 10+ years of cybersecurity experience, including 5+ years of hands-on coding.
  • Deep expertise in threat modeling, code reviews, and offensive security methodologies, including hands-on penetration testing.
  • Working knowledge of Linux environments, command-line tools, shell scripting, system hardening, and security configuration.
  • Strong foundation in IP, DNS, HTTP, SSL/TLS, cryptography, PKI, encryption at rest and in motion, and public cloud platforms such as AWS, Azure, or GCP.
  • Proficiency in programming languages including C/C++, Java, JavaScript, Python, Go, or Rust.
  • Deep understanding of OWASP Top 10 and SANS CWE Top 25.
  • Knowledge of enterprise software development, Agile, CI/CD pipelines, SAST, DAST, OSA, vulnerability management, and API traceability.
  • Ability to communicate complex technical risks to non-technical executives and engineers and build strong cross-functional partnerships.
  • Ability to drive projects independently from conception to completion with minimal oversight.

Nice to have

  • Continuous interest in securing systems and learning new technologies.
  • Current Offensive Security Certified Professional (OSCP) certification.
  • Experience securing trading, financial-market, regulated, or other high-stakes systems.
  • Additional security architecture, offensive security, or cloud security certifications, including SABSA, TOGAF, CISSP, OSCE, SANS, CREST, CISM, AWS, Azure, or GCP certifications.

Culture & Benefits

  • Full-time onsite work in SoHo, London.
  • Work on security for crypto markets, trading systems, financial data, media, events, and indices.
  • Equal-opportunity employment and reasonable accommodations during the application process.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →