Cyber Security Engineer, Coinshares
4 days a week in office (City of London)
Digital asset managers
Open for applications
Digital asset managers
21-100 employees
Open for applications
4 days a week in office (City of London)
21-100 employees
Company mission
To expand access to the digital asset ecosystem while serving as a trusted partner for our clients.
Role
Who you are
- We are seeking an experienced and hands-on Cyber Security Engineer with at least 5 years of experience to join our security team
- 5 years' experience in a hands-on cyber security engineering or security operations role, with demonstrable breadth across multiple security domains
- Experience running security processes end-to-end across multiple domains within a small team environment, operating as a generalist rather than a specialist in a single area
- Bachelor's degree in Cyber Security, Computer Science, Information Technology, or equivalent practical experience
- Relevant certifications are desirable (e.g. CISSP, CEH, AWS Security Specialty or CCSP
- Prior exposure to digital asset infrastructure, crypto custody or trading environments is advantageous but not required
- Strong foundational knowledge across core cyber security domains: network security, endpoint security, cloud security, identity and access management, vulnerability management, threat detection, incident response and data security
- Solid understanding of security frameworks including NIST CSF 2.0 and SOC 2
- Experience working in a regulated environment; exposure to GDPR, DORA, SOX and the SEC Cybersecurity Rule is highly advantageous
- Hands-on experience with SIEM, SOAR and EDR/XDR platforms - configuration, tuning, alerting, and integration with response workflows
- Strong grasp of identity and access management including SSO, SCIM, access policies and secrets/credential management API keys and private keys)
- Experience with vulnerability management tooling and a structured, risk-based approach to remediation
- Working knowledge of cloud security concepts and controls, ideally in AWS. Familiarity with CSPM tooling such as Wiz is highly desirable
- Ability to design and operate security controls that are pragmatic and proportionate to the business environment
- Strong problem-solving skills with a risk-based mindset and sound judgement under pressure
- Excellent written and verbal communication skills, with the ability to translate technical risk into clear language for non-security stakeholders
What the job involves
- The security team exists to protect CoinSharesʼ digital assets, systems, people and data while enabling the business to operate securely without friction
- The team safeguards the business against cyber threats in a highly regulated, cloud-first environment, ensuring that security is embedded into day-to-day operations and technology decisions - a trusted partner to the business, not a blocker
- Working closely with all teams, the security team designs and maintains a robust cyber security framework that evolves alongside the business. Their work is central to maintaining operational resilience, regulatory confidence and the trust that underpins CoinSharesʼ position as a leading digital asset manager
- Working within the fast-paced digital finance sector, you will play a key role in designing, implementing and maintaining security controls across CoinShares' cloud-first environment
- You will also be central to monitoring, analysing and responding to threats, strengthening our security posture and ensuring our infrastructure remains scalable, resilient and secure
- Design, implement and maintain security controls across all systems and environments, spanning enterprise IT, cloud infrastructure and digital asset operations
- Operate core security functions including endpoint protection, email security, identity and access management, data security and security monitoring
- Manage and continuously improve the firm's SIEM, SOAR and EDR/XDR tooling, ensuring effective alerting, tuning and integration with incident response processes
- Lead detection engineering and incident response, acting as the primary technical responder during security events and investigations
- Lead vulnerability management and remediation across all environments, prioritising based on risk and business impact
- Partner with IT, engineering and DevOps teams to embed security earlier in the development lifecycle, across infrastructure and into CI/CD pipelines
- Maintain and improve cloud security controls across AWS, leveraging CSPM tooling to monitor posture and drive remediation
- Conduct threat modelling, security architecture reviews and risk assessments for new systems, services and third-party integrations
- Support third-party and vendor risk assessments, including review of SOC 2 reports, penetration test reports and security questionnaires
- Contribute to the security of CoinShares' digital asset infrastructure, including custody and trading environments; prior exposure to crypto security is welcome but not expected
- Play an active role in compliance initiatives (e.g. SOX 404, SOC 2, DORA) through control design, evidence generation, penetration testing coordination and audit support
- Develop and maintain security standards, policies and technical documentation
- Continuously evaluate the emerging threat landscape and recommend improvements to CoinSharesʼ security posture
Salary benchmarks
Our take
Coinshares is a digital asset investment house founded in 2013, aiming to bridge the gap between traditional financial markets and crypto markets. Using a mixture of financial expertise and artificial intelligence, Coinshares offer a suite of products and services for investors and traders.
Coinshares is headed by some of the brightest in financial trading, CSO Meltem Demirors being a major spokesperson for the benefits and evolution of crypto. As the market philosophy has changed, Coinshares employees are proponents of engaging with institutions on a financial level rather than disconnecting crypto from them entirely. With one of its founders being a former JP Morgan Strategist, it’s no surprise to find that Coinshare makes evidence-based decisions on trading, keeping their relationships measured and cautious.
This is a positive for Coinshares, evidenced by how the company has deftly navigated the financial turmoil of the 2020s. Despite bitcoin and ether falling in value over this period, Coinshares bought back shares from Nasdaq in June 2022.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-13% employee growth in 12 months
Company
Company benefits
- Employee Development: We value continuous personal development and training through our partnership with Coursera aswell as offering sponsorship for qualifications such as IMC, CFA, and other recognised professional courses.
- Health and Wellness: CoinShares provides eligible employees with comprehensive and competitive health coverage and other wellbeing benefits.
- Financial Future: We aim to help make you and your families future more financially secure by helping you pursue your retirement goals and offering life and other disability benefits
Company HQ
Saint Helier, St Helier
Leadership
JM Mognetti
(Co-Founder & CEO)Currently Director at Komainu-Next Generation Custodian and XBT Provider. Previously Director at Global Advisors Holdings Limited.
Share this job
View 1 more job at Coinshares