PRIVATE · WALLET · Blockchain.com

Security Engineer, Institutional Trading

Security engineer for Blockchain.com’s institutional trading stack in London: trading workflows, custody touchpoints, key hygiene, and the monitoring of order and settlement signals.

You are deciding whether to write the controls under an institutional trading stack, in London, with no pay figure and a work-from-anywhere perk of 20 days — not a remote contract.

Blockchain Lab analysis, for a candidate deciding whether to apply. We are not the employer. Compensation on this posting: Not disclosed.

Listing age

43 days

Equity

Private. Illiquid.

Valuation

Not disclosed

Where

London

Status: Open on the employer board — checked 2026-10-06
Board updated: 2026-08-24 · 43 days before this check
Location: London
Remote eligibility: London. The posting’s work-from-anywhere line is up to 20 days a year. That is not a remote employment contract.
Employment: Full-time
Compensation: Not disclosed
Experience, as stored: 5+ years in security engineering, platform security, or application security. On-chain wallet concepts are named; contract auditing is explicitly not required.
Original post date: Not disclosed

Apply on the employer site The company Practice project

The company you would actually join

Blockchain Lab analysis

Public reporting and the employer’s own releases. Not a relationship with Blockchain Lab. Not a credit opinion.

Founded: 2011, as the posting says.
Base: London for this seat.
Status: Private. Do not treat it as a listed company. A wallet-user count is not a valuation.
People: Peter Smith is the long-time chief executive. Nicolas Cary is the co-founder associated with the company in public. This brief does not invent a current org chart above the security team.

The posting sells trust at consumer scale and then describes a job that is institutional and specific. You would map trading systems with middle office and quant, write risk-treatment plans against CCSS, NIST, and DORA, sit with vendors, and wire order and settlement anomalies into a SIEM. Contract auditing is explicitly not required. On-chain vocabulary is. That combination is a fintech security engineer who can read a transaction, not a Solidity reviewer who wants a consumer brand on the CV.

What the posting does not sell is a number. No salary. Equity is 'meaningful', which is how private companies describe a grant they do not want compared. The location is London, with 20 days of work-from-anywhere as a perk. If a recruiter offers worldwide remote, they are offering something the text does not. The company is private. Price any equity story against whatever round they will actually show you, not against a user count.

Founders

Peter Smith

Co-founder and CEO

The public operator of the company for years. A London security engineer on institutional trading will not learn the product from him. You will learn whether institutional trading is a business the company is funding or a slide next to the wallet.

Nicolas Cary

Co-founder

The other name the company's public history rests on. Useful context, not a hiring manager. Ask who actually owns FinOps security.

What the company sells

The wallet

The posting's own scoreboard: since 2011, over 90 million wallet holders, more than 40 million verified users, over $1 trillion in transactions. Employer-stated. Not audited here.

Institutional trading

The seat's surface: inventory, middle office, quant, custody and settlement touchpoints. Security signals include abnormal orders, signature misuse, and unusual settlements.

The perk that is not the job

Work from anywhere up to 20 days a year. The employment is London.

Capital

Valuation

Not disclosed

Private. No figure in this brief.

This seat's pay

Not disclosed

Full-time salary based on experience, the posting says. No number.

Equity

Meaningful

The employer's adjective. Not a percentage.

Users

90 million wallets

Employer-stated on the posting. A distribution fact, not revenue.

Not restated
Venture history, not a live mark
Not disclosed here
The company has raised before. This pass does not repeat a valuation from a database. The posting offers 'meaningful equity' and does not price it. A failed attempt to become a public company is part of the industry's memory of the brand. It is not a current listing. Ask what the last priced round was, and whether common still sits under a stack from a hotter market.

What should change your mind

No pay band. 'Based on experience' is not a negotiation if they will not anchor.
Equity adjective without a cap table.
Institutional trading at a consumer-wallet company can be a small desk with a large job description.
DORA and similar regimes are real work. If you have not operated a control, do not bluff it.

Ask them

What is the band for London, and what did the last person in the seat make?
What percentage is 'meaningful', and what is the last round's price?
How many people are on institutional trading, and who signs the risk treatment?
Is the 20-day perk the only remote, and which entity employs the UK?

Sources

If a figure is not in those sources, it is not in this brief on purpose.

What the employer actually wrote

Employer stated. Security engineer for Blockchain.com’s institutional trading stack in London: trading workflows, custody touchpoints, key hygiene, and the monitoring of order and settlement signals.

Partner with Trading, Middle Office and Quant (Institutional FinOps) teams to map out inventory trading systems, data flows, third-party integrations and custody/settlement touchpoints.
Conduct deep-dive assessments mapping critical assets and workflows to identify structural vulnerabilities. You will be responsible for defining the Target State and drafting the strategic Risk Treatment Plans (RTP) required to meet institutional-grade standards (e.g., CCSS, NIST, DORA).
Act as the primary security liaison for Senior Management and third-party vendors. You will translate complex technical gaps into actionable business risk summaries, drive vendor evaluations for core security infrastructure, and manage the project lifecycle for high-impact posture uplifts.
Implement and maintain monitoring for FinOps-specific security signals such as abnormal order patterns, signature misuse, unusual settlements. You will integrate these signals into our SIEM/SOAR for real-time response.
Support secrets and key-management hygiene. You will ensure app/service keys are stored in KMS/Vault, scoped to least privilege and rotated automatically to prevent credential leakage.

Source: the employer’s public Greenhouse record, job 7904343. Open the original. First seen by this desk 2026-10-06. Nothing above the fold is a substitute for that page.

A reading of the work

Blockchain Lab analysis. These lines are a reading of the advertisement. They are not extra hiring requirements.

Map the path from an order to a custody movement before you talk about AI.
The posting asks for CCSS, NIST, and DORA language. That is a control-design seat.
Wallet-user counts on the company blurb are not the risk of this desk.

Still not disclosed

Compensation, unless a figure appears in the header. None of these eighteen postings stated one.
Closing date, and the day the role was first published. The board timestamp is an update.
Visa sponsorship, on-call, and the employing subsidiary.

Not a recommendation to apply. Not an employer assessment. Figures from public reporting move, and a database is not a filing. How this desk labels evidence. Report a listing.

Blockchain.com · London · pay not disclosed

Apply