Designs and maintains security controls for blockchain, digital asset, application, cloud, and infrastructure environments. Responsibilities include threat modeling, cryptographic key management, application and API security, AWS and Kubernetes hardening, vulnerability management, monitoring, incident response, penetration testing, and security governance. The engineer collaborates with Cybersecurity, Engineering, DevOps, and Infrastructure teams to secure distributed systems and support regulatory requirements.
Who We Are:
We are on a mission to provide innovative working capital solutions to small and medium-size businesses throughout the United States, Canada, and the United Kingdom. A steady cash flow can change the course of a business and help a company define its future, promote growth, and impact the bottom line! As a leading provider of innovative funding solutions for small to medium sized businesses, we are one of the fastest growing companies in the industry. Through our Commercial Finance, Freight Factoring and ABL divisions, eCapital offers capital solutions to 80+ industries. We truly love to help our clients grow, and this is a position where you can grow too!
Summary:
eCapital is seeking an experienced and highly motivated Digital Assets Security Engineer to join our growing Cybersecurity team. As we expand our adoption of digital technologies, this role will play a critical part in designing, implementing, and maintaining security controls across our application and digital assets infrastructure, FinTech applications, and supporting cloud environments.
The ideal candidate brings expertise in blockchain enterprise security, cloud infrastructure, application security, cryptography, and secure software development. This is a hands-on role collaborating with Cybersecurity, Engineering, DevOps, and Infrastructure teams.
Responsibilities:
Blockchain & DLT Security
At eCapital, we're not just a funding provider—we're a strategic partner built for what's next. Our culture is defined by innovation, scalability, and personalized service. We value:
eCapital values diverse experiences and backgrounds. We encourage all qualified candidates to apply, regardless of race, color, religion, gender, sexual orientation, national origin, genetics, disability, age, or veteran status.
AI Statement
eCapital uses AI-enabled tools within our applicant tracking system to support resume screening by comparing qualifications to job requirements. Final hiring decisions and resume reviews are always conducted by our recruiters.
Vacancy Type: Addition
We are on a mission to provide innovative working capital solutions to small and medium-size businesses throughout the United States, Canada, and the United Kingdom. A steady cash flow can change the course of a business and help a company define its future, promote growth, and impact the bottom line! As a leading provider of innovative funding solutions for small to medium sized businesses, we are one of the fastest growing companies in the industry. Through our Commercial Finance, Freight Factoring and ABL divisions, eCapital offers capital solutions to 80+ industries. We truly love to help our clients grow, and this is a position where you can grow too!
Summary:
eCapital is seeking an experienced and highly motivated Digital Assets Security Engineer to join our growing Cybersecurity team. As we expand our adoption of digital technologies, this role will play a critical part in designing, implementing, and maintaining security controls across our application and digital assets infrastructure, FinTech applications, and supporting cloud environments.
The ideal candidate brings expertise in blockchain enterprise security, cloud infrastructure, application security, cryptography, and secure software development. This is a hands-on role collaborating with Cybersecurity, Engineering, DevOps, and Infrastructure teams.
Responsibilities:
Blockchain & DLT Security
- Design and maintain security controls across enterprise digital assets environments.
- Conduct architecture reviews and threat modelling for digital assets technologies, applications, and integrations.
- Assess risks associated with the private & public digital asset networks, third- party platforms and associated risks.
- Evaluate consensus mechanisms, network communications, identity management, and trust boundaries.
- Identify vulnerabilities in blockchain protocols and node configurations; establish hardening baselines.
- Review key generation, storage, rotation, recovery, and revocation practices.
- Evaluate HSMs, cloud key management services and secure signing architectures.
- Protect private keys, digital signatures, certificates, and blockchain credentials.
- Assess digital assets applications, APIs and supporting services.
- Partner with development teams on secure SDLC and CI/CD practices, code reviews, and remediation.
- Review IaC and applications authorization, business logic, and transaction integrity risks.
- Develop testing approaches for blockchain-based applications and integrate automated gates into CI/CD.
- Secure workloads are deployed on AWS, Azure and other cloud platforms, as applicable.
- Assess security posture for Kubernetes, containers, network segmentation, IAM entitlements, secrets management, and infrastructure as code (IaC).
- Implement hardening, vulnerability management, and continuous monitoring across environments.
- Review third-party digital assets infrastructure and service dependencies.
- Develop detection and monitoring for digital assets infrastructure and applications; integrate telemetry with enterprise SIEM.
- Investigate suspicious activity, unauthorized access, and infrastructure anomalies.
- Support incident response playbooks and tabletop exercises involving distributed systems and cryptographic assets.
- Conduct technical risk assessments and support penetration testing.
- Prioritize findings and drive remediation with Engineering & business stakeholders.
- Maintain security standards, architecture documentation, and operating procedures.
- Support applicable financial services regulatory and applicable security frameworks’ requirements.
- Bachelor’s degree in a relevant field or equivalent practical experience.
- 7+ years in security engineering, application security, cloud security, or related cybersecurity roles.
- Demonstrated experience securing digital assets, DLT or cryptographic systems.
- Strong understanding of distributed systems, digital assets architecture, and cryptography.
- Hands-on AWS, Kubernetes, Docker, Linux, and infrastructure security experience.
- Experience in application/API security, secure coding, threat modelling, vulnerability assessment, and penetration testing.
- Knowledge of key management, PKI, digital signatures, HSMs, or cloud KMS.
- Proficiency in Python, Go, Java, TypeScript, or a comparable language.
- Ability to communicate risk clearly and collaborate across technical teams.
- Digital assets networks, Daml, or relevant enterprise security DLT experience.
- Experience securing participant nodes, digital assets services, and distributed applications.
- Digitized assets review and testing experience.
- Financial services or regulated-environment experience.
- Familiarity with SIEM solutions, security automation, and DevSecOps.
- Relevant certifications such as CISSP, CSSLP, or AWS Security Specialty.
- Salary: $110,000 - $130,000USD
- Annual Bonus
- PTO
- Health, Dental, and Life Benefits
- 401k Matching
- Abundant professional development opportunities at a growing and thriving alternative Finance company!
At eCapital, we're not just a funding provider—we're a strategic partner built for what's next. Our culture is defined by innovation, scalability, and personalized service. We value:
- Agility: We adapt quickly to changing market conditions and customer needs.
- Relationships: We put our clients' needs at the center of everything we do, and we believe the best results come from diverse teams working together.
- Accountability: We hold ourselves to the highest standards in all aspects of our work.
- Innovation: We constantly push boundaries to create better solutions for our clients.
eCapital values diverse experiences and backgrounds. We encourage all qualified candidates to apply, regardless of race, color, religion, gender, sexual orientation, national origin, genetics, disability, age, or veteran status.
AI Statement
eCapital uses AI-enabled tools within our applicant tracking system to support resume screening by comparing qualifications to job requirements. Final hiring decisions and resume reviews are always conducted by our recruiters.
Vacancy Type: Addition
eCapital Corp. New York, New York, USA Office
New York, United States, 10018
Similar Jobs
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Leads AI transformation, governance, quality oversight, risk management, and responsible adoption across Pfizer Global Supply and QSEO. Establishes GxP-compliant AI lifecycle practices, inspection-readiness frameworks, governance forums, portfolio monitoring, inventory management, metrics, and reporting. Advises senior leaders on AI regulations, deployment risks, investment priorities, and compliance while leading cross-functional initiatives and influencing stakeholders across Quality, Digital, Operations, and R&D.
Top Skills:
Ai GovernanceAiqasAirifArtificial IntelligenceComputerized SystemsGxpImexLeanMachine LearningSix Sigma
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Provides strategic leadership for Computer System Assurance and quality oversight of regulated GMP/GDP computer systems across global pharmaceutical sites and Digital organizations. Establishes risk-based assurance, validation, monitoring, governance, inspection readiness, and compliance practices. Leads complex investigations, audits, regulatory-inspection support, process improvements, and cross-functional initiatives involving Digital, artificial intelligence, automation, and federated solutions. Advises senior leaders, influences stakeholders without direct authority, and deputizes for the Global Process Owner.
Top Skills:
21 Cfr Part 11Artificial IntelligenceAutomationCloud ComputingComputer System AssuranceComputerized-System ValidationContinuous MonitoringEu Annex 11Federated SystemsGamp 5GdpGmpIch Q9ImexLeanSix Sigma
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Drives sales and customer relationships for Pfizer’s neuroscience migraine portfolio within an assigned territory. Develops territory call plans, engages healthcare providers in person and virtually, educates customers on approved product and disease-state information, identifies strategic business opportunities using analytics, collaborates cross-functionally, and completes administrative responsibilities compliantly.
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
