SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Blockchain.com is seeking a Security Engineer to embed with the Institutional Trading and Financial Operations (FinOps) team in Paris. This hands-on role focuses on securing off-chain trading processes and infrastructure that power the company's institutional business, including integrations, signing flows, key custody interfaces, middle-office workflows, order routing, and settlement pipelines handling significant capital.
Key responsibilities include partnering with Trading, Middle Office, and Quant teams to map trading systems, data flows, and third-party integrations; conducting deep-dive threat modeling assessments (STRIDE) to identify structural vulnerabilities and define Target State security postures aligned with institutional standards (CCSS, NIST, DORA); acting as primary security liaison to Senior Management and vendors, translating technical gaps into business risk summaries; implementing monitoring for FinOps-specific security signals (abnormal order patterns, signature misuse, unusual settlements) integrated into SIEM/SOAR; ensuring secrets and key management hygiene through KMS/Vault with least-privilege scoping and automatic rotation; assisting product security in triaging SAST/SCA findings and implementing CI checks; participating in incident exercises and post-incident reviews; and researching/architecting safe AI/LLM integration into secure infrastructure.
Required qualifications: 5+ years in security engineering, platform security, or application security; proven threat modeling expertise; hands-on experience with observability/detection tooling (SIEM, logs, metrics); practical KMS/HSM and secrets management platform experience (Vault, 1Password, AWS/GCP KMS); ability to translate technical debt into business risk for C-suite stakeholders; code review capability in TypeScript, Java/Kotlin, or Python; and technical due diligence experience for third-party security integrations.
Nice-to-have: familiarity with trading systems/financial operations, blockchain on-chain concepts, SOC operations, post-incident forensics, SOC2/ISO 27001/financial audit requirements, or relevant industry certifications.
Compensation includes unlimited vacation, unlimited books policy, Apple equipment, full-time salary based on experience, and meaningful equity. Role based in Paris office with mandatory four-day in-office presence; Work from Anywhere policy allows up to 20 remote days annually.
