Plan, perform and control the activities to assure Blockchain.com’s controls are effectively implemented to comply with defined standards. Ensure compliance of all IT services with the legal frameworks applicable. Evaluate information security risks and identify solutions to minimize exposure. Identify, propose and work towards new applicable certifications, audits and frameworks and act as a liaison between audit requirements and engineering teams.

WHAT YOU WILL DO

• Oversee execution and completion of applications related security controls ensuring effectiveness.
• Design, create and share policies, standards and procedures to ensure demonstrable regulatory /legal control. Communicate changes to internal stakeholders.
• Conduct preliminary self-assessment control tests of the applicable controls.
• Track and document remediation actions as result of audit findings,
• Host internal/external IT audits including walkthroughs, retaining test evidence for in scope assets and tracking action plans to either remediate or mitigate potential risk exposure findings.
• Conduct the quarterly User Access reviews process including information gathering, management responses tracking, and results review to follow through on corrective actions.
• Develop, implement and maintain a risk register. Contribute results to the corporate dashboard.
• Participate in new tools/partners/investors due diligences.
• Have an active participation in Digital projects and perform other activities assigned by the Manager.

WHAT YOU WILL NEED

• Forward-looking and strategic minded, with an eye to understanding potential risks, legal and compliance implications.
• Good knowledge of IT risk areas including regulatory, operational, information and energy industry specific.
• Good overall knowledge of application and infrastructure security control mechanisms.
• Advanced command of the English language.
• 2+ years experience in audit and security certifications such as ISO, SOC and PCI.
• Education Four-year college degree (or equivalent)

JOB CHALLENGES

• Ensure robust information protection policies are in place.
• Ensure effective processes are in place to manage risk, identify nonconformance and assure remediation/ mitigation actions.
• Audit reviews passed without significant findings.
• Achieve applicable audits and certifications.

COMPENSATION & PERKS

• Competitive full-time salary based on experience and meaningful equity in an industry-leading company
• This is a role based in our Palermo office, with a mandatory in-office presence four days per week.
• The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an exciting, emerging industry.
• Performance-based bonuses
• Apple equipment provided by the company
• Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.

We are looking for a Senior Infrastructure Security Engineer with a proven track record in keeping systems safe. You will play a critical role in building and providing tooling that monitors our entire stack, from supporting our consumer-facing products and our institutional offerings to ensuring that we are capable of rapidly responding to cyber attacks on our colleagues and endpoints.

Throughout our company, Security is a well-established mindset that leverages novel engineering approaches - as a Senior Infrastructure Security Engineer, you will lead by example and drive technical discussions with engineering teams and influence the overall architecture of our platform.

Our day-to-day work is interesting and dynamic, driven by a focus on proactive threat actor identification and in-depth investigation of security issues. These practices are key to ensuring strong product security and fostering continuous, iterative improvement.

WHAT YOU WILL DO:

• Design, build, and implement security controls, automation, and processes across product, platform, and infrastructure environments.
• Identify operational and technical security gaps, propose solutions, and drive engineering initiatives to close them.
• Collaborate with the SRE and engineering teams to integrate security into CI/CD pipelines, deployment workflows, and cloud-native architectures.
• Build automated tooling and services to enforce secure configurations, detect misconfigurations, and support continuous compliance.
• Assist in threat modeling, design reviews, and architectural assessments for new and existing systems.
• Contribute to internal security documentation, best practices, and developer guidance.
• Participate in security incident response when engineering expertise or automation support is needed.

WHAT YOU WILL NEED:

• 4+ years of experience in security engineering, platform security, or DevSecOps roles.
• Hands-on experience implementing security controls and automation within cloud environments, GCP or AWS are preferred.
• Proficiency in modern scripting, automation and infrastructure as code e.g. Python, Bash, Go, Terraform, or similar.
• Ability to collaborate closely with engineering teams and translate security requirements into practical, scalable solutions.
• Strong analytical and problem-solving skills, with a bias toward automation over manual workflows.
• Curiosity, ownership, and a drive to continuously improve the security posture of complex systems.
• Familiarity with some of the following: Cloudflare (DDoS protection, WAF), OSS SIEM tools (Splunk, Elastic, etc), Incident management platforms (e.g. Incident.io, PagerDuty)
• Familiarity with at least one of the following CI/CD systems (Github Actions, Concourse, CircleCI)
• Familiarity with maintaining HIDS systems (Wazuh preferred).

NICE TO HAVE

• Knowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.
• Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted components
• Experience securing consumer-facing web and iOS / Android applications
• Experience designing policies and administering Vault & other Hashicorp products.
• Experience managing security vendors

COMPENSATION & PERKS

• Full-time salary based on experience and meaningful equity in an industry-leading company
• This is a role based in our London office, with a mandatory in-office presence four days per week.
• Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.
• ClassPass 
• Unlimited vacation policy; work hard and take time when you need it
• Apple equipment
• The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field
• Flexible work culture