Digital Asset Logo

Digital Asset

APPSEC Security Engineer

Posted 21 Days Ago
Remote or Hybrid
Hiring Remotely in US
Mid level
Remote or Hybrid
Hiring Remotely in US
Mid level
Security Engineer responsible for application security, vulnerability and threat management, cloud and Kubernetes security, DevSecOps tooling, incident response, forensic analysis, and secure system architecture. The role integrates security testing into CI/CD pipelines, automates security tasks, supports IAM and cryptographic key management, and collaborates with engineering teams to strengthen security processes and tooling.
The summary above was generated by AI
About Digital Asset & the Canton Network
Digital Asset builds the technologies that are reshaping the foundations of financial markets. Our mission is to create the world’s most trusted, privacy-enabled, and interoperable digital infrastructure for global finance.
At the heart of this mission is the Canton Network — the blockchain purpose-built for institutional finance. Uniquely combining privacy, compliance, and scalability, Canton enables real-time, secure settlement across multiple asset classes. Governed by the Canton Foundation with participation from leading financial institutions, it is the proven link between the promise of blockchain and the power of global finance.
Founded in 2014 and headquartered in New York City, with offices in London, Zurich, Budapest, Hong Kong, and Sydney — we are on a mission to transform finance — and that transformation is now playing out rapidly on the Canton Network.
If you’re interested in playing a crucial role at the intersection of traditional and crypto-capital markets and want to help bring the next trillion dollars of finance on-chain, join us.
PLEASE NOTE:
Candidates must presently reside within a commutable distance from our New York City headquarters with the ability to be on-site, in the office on a hybrid basis.

Job requirements
  • Vulnerability & Threat Management: Proven ability to perform vulnerability assessments and run penetration tests, interpret the results, and prioritize remediation efforts. Experience with threat modeling and threat intelligence is also key.
  • Cloud Security: Working knowledge of securing Google Cloud (and AWS, Azure). This includes identity and access management (IAM), GKE, and Cloud Armor, logging, and data protection in the cloud.
  • Scripting and Automation: Proficiency in scripting language (e.g., Python, GoLang, or Bash) to automate security tasks, analyze logs, and develop custom tools.
  • Kubernetes and Container Hardening: Expertise in securing GKE cluster components, including leveraging native features like Pod Security Standards (PSS) enforcement, and Network Policies to control Pod-to-Pod traffic and runtime security observability.
  • AppSec Security: Integrating security checks (SAST/DAST, dependency scanning, SCA) into CI/CD pipelines, and hardening build infrastructure and workflows.
  • Strong oral and written communication skills, ideally experience writing technical documentation and specifications.
  • Some experience with cryptographic keys, KMS, HSMs
  • 3-7 years of experience in IT and application security.
  • Bachelor’s Degree Cyber Security, Computer Science or related field.
  • Based in the NY/NJ/CT tri-state area

Job responsibilities
Opportunity
Digital Asset enables mission critical workflows in the financial industry through development using Daml and runs on the Canton ledger and the Canton Network. The security team supports this mission by providing infrastructure and application security guidance and tooling for DA products and services.
  • As a Security Engineer, you will have the opportunity to shape our security posture in many domains including; application security, vulnerability management, IAM, cloud and network security, incident response, digital forensics, DevSecOps, etc.
  • Participate in and, in some cases, lead security incident response efforts, including initial containment, investigation, forensic analysis, and post-incident reporting.
  • Contribute to the secure design and architecture of new and existing systems, ensuring security is integrated from the start (Security by Design).
  • Participate in fostering a DevSecOps culture in the company
  • Collaborate with other teams to facilitate adoption of security processes and tooling

NO AGENCIES PLEASE!
Benefits
We offer a comprehensive benefits package designed to support the well-being of our team members. Health and insurance benefits vary by region to ensure local relevance and compliance, and may include medical, dental, and vision coverage.
Digital Asset is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, sex, religion, sexual orientation, age, disability, citizenship status, veteran status or any other basis protected by applicable law. If and as required by applicable law, all persons hired to work at Digital Asset will be required to verify identity and eligibility to work in the location for which they have an offer to work and to complete the necessary employment eligibility verification documents upon hire. Applicants with disabilities who require accommodation should contact [email protected].
As part of our commitment to equal opportunity, Digital Asset believes that all employees should receive equal pay for equal work and is committed to this principle in its pay structure. DA also offers family-friendly benefits in addition to flexible work arrangements.
Pay Transparency: The estimated salary range for this role, based in our New York City office, is $160,000-$190,000. The range may vary if based outside the New York tri-state area (New York, New Jersey, and Connecticut). Base salaries are determined during our interview process, during which we assess the candidate's experience, skills, and capabilities against internal peers and the scope and responsibilities of the position.

Similar Jobs

2 Hours Ago
Remote
Mid level
Mid level
Blockchain • Fintech • Payments • Financial Services • Cryptocurrency • Web3 • Infrastructure as a Service (IaaS)
Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.
Top Skills: Ddos ProtectionGoogle Cloud PlatformNode.jsRate LimitingStatic AnalysisTerraformTypescriptWeb Application Firewall (Waf)
Senior level
Artificial Intelligence • Big Data • Cloud • Information Technology • Software • Cybersecurity • Data Privacy
Owns the post-sales lifecycle for enterprise customers, serving as their primary advocate and coordinating onboarding, adoption, value realization, renewals, escalations, and issue resolution. Develops success plans, monitors account health, drives product usage, manages cross-functional teams, communicates with executive stakeholders, and delivers proactive recommendations and root cause analyses. Requires strong enterprise account management, escalation leadership, communication, and collaboration skills, with occasional travel and flexibility outside standard business hours.
Top Skills: Cloud Data Management
39 Minutes Ago
Remote or Hybrid
Junior
Junior
Artificial Intelligence • Automotive • Greentech • Information Technology • Machine Learning • Software • Cybersecurity
Processes billing transactions, invoices, credits, payments, and account adjustments; maintains customer accounts; audits billing information; researches and resolves discrepancies; handles customer inquiries; monitors billing reports; supports collections and approval workflows; maintains documentation; and partners with internal teams to improve billing accuracy and efficiency.
Top Skills: ExcelOracleOutlookPowerPointWord

What you need to know about the Ottawa Tech Scene

The capital city of Canada and the nation's fourth-largest urban area, Ottawa has proven a rapidly growing global tech hub. With over 1,800 tech companies, many of which are leaders in their sectors, the city's tech talent now makes up more than 13 percent of its total workforce. This growth is driven not only by the big players like UL Solutions and Dropbox, but also by a thriving startup ecosystem, as new businesses emerge to follow in the footsteps of those that came before them.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account