> Markdown version of [/jobs/ext/4022630-security-engineer-digital-assets](https://www.wearedevelopers.com/jobs/ext/4022630-security-engineer-digital-assets). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - Digital Assets - **Company:** eCapital Freight Factoring Corp. - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $110,000.0 - $130,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Business Logic, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cloud Computing Security, Code Review, Computer Networks, Continuous Integration, Linux, Digital Assets, Digital Signature, Distributed Systems, Identity and Access Management, Python (Programming Language), Key Management, Network Segmentation, Public Key Infrastructure, Blockchain, Secure Coding, Security Information and Event Management, TypeScript, Software Vulnerability Management, Software Security, Kubernetes, Devsecops, Docker, Security Orchestration, Automation & Response, Vulnerability Analysis, Golang - **Published:** October 30, 2026 - **Apply:** https://www.builtincolorado.com/job/security-engineer-digital-assets/11971862?handler=ApplyRedirect ## About the Role * Bachelor's degree in a relevant field or equivalent practical experience. * 7+ years in security engineering, application security, cloud security, or related cybersecurity roles. * Demonstrated experience securing digital assets, DLT or cryptographic systems. * Strong understanding of distributed systems, digital assets architecture, and cryptography. * Hands-on AWS, Kubernetes, Docker, Linux, and infrastructure security experience. * Experience in application/API security, secure coding, threat modelling, vulnerability assessment, and penetration testing. * Knowledge of key management, PKI, digital signatures, HSMs, or cloud KMS. * Proficiency in Python, Go, Java, TypeScript, or a comparable language. * Ability to communicate risk clearly and collaborate across technical teams. Preferred Qualifications * Digital assets networks, Daml, or relevant enterprise security DLT experience. * Experience securing participant nodes, digital assets services, and distributed applications. * Digitized assets review and testing experience. * Financial services or regulated-environment experience. * Familiarity with SIEM solutions, security automation, and DevSecOps. * Relevant certifications such as CISSP, CSSLP, or AWS Security Specialty. ## Description Designs and maintains security controls for blockchain, digital asset, application, cloud, and infrastructure environments. Responsibilities include threat modeling, cryptographic key management, application and API security, AWS and Kubernetes hardening, vulnerability management, monitoring, incident response, penetration testing, and security governance. The engineer collaborates with Cybersecurity, Engineering, DevOps, and Infrastructure teams to secure distributed systems and support regulatory requirements., eCapital is seeking an experienced and highly motivated Digital Assets Security Engineer to join our growing Cybersecurity team. As we expand our adoption of digital technologies, this role will play a critical part in designing, implementing, and maintaining security controls across our application and digital assets infrastructure, FinTech applications, and supporting cloud environments. The ideal candidate brings expertise in blockchain enterprise security, cloud infrastructure, application security, cryptography, and secure software development. This is a hands-on role collaborating with Cybersecurity, Engineering, DevOps, and Infrastructure teams., Blockchain & DLT Security * Design and maintain security controls across enterprise digital assets environments. * Conduct architecture reviews and threat modelling for digital assets technologies, applications, and integrations. * Assess risks associated with the private & public digital asset networks, third- party platforms and associated risks. * Evaluate consensus mechanisms, network communications, identity management, and trust boundaries. * Identify vulnerabilities in blockchain protocols and node configurations; establish hardening baselines. Cryptography & Key Management * Review key generation, storage, rotation, recovery, and revocation practices. * Evaluate HSMs, cloud key management services and secure signing architectures. * Protect private keys, digital signatures, certificates, and blockchain credentials. Application & Digital Assets Security * Assess digital assets applications, APIs and supporting services. * Partner with development teams on secure SDLC and CI/CD practices, code reviews, and remediation. * Review IaC and applications authorization, business logic, and transaction integrity risks. * Develop testing approaches for blockchain-based applications and integrate automated gates into CI/CD. Cloud & Infrastructure Security * Secure workloads are deployed on AWS, Azure and other cloud platforms, as applicable. * Assess security posture for Kubernetes, containers, network segmentation, IAM entitlements, secrets management, and infrastructure as code (IaC). * Implement hardening, vulnerability management, and continuous monitoring across environments. * Review third-party digital assets infrastructure and service dependencies. Security Monitoring & Incident Response * Develop detection and monitoring for digital assets infrastructure and applications; integrate telemetry with enterprise SIEM. * Investigate suspicious activity, unauthorized access, and infrastructure anomalies. * Support incident response playbooks and tabletop exercises involving distributed systems and cryptographic assets. Security Governance & Risk Management * Conduct technical risk assessments and support penetration testing. * Prioritize findings and drive remediation with Engineering & business stakeholders. * Maintain security standards, architecture documentation, and operating procedures. * Support applicable financial services regulatory and applicable security frameworks' requirements.