Full-Time
Associate Director Cloud Security Engineering
DTCC
1,001-5,000 employees
Global post-trade market infrastructure provider
Compensation Overview
$95k - $180k/yr
Tampa, FL, USA + 1 more
More locations: Dallas, TX, USA
Hybrid
Three days onsite and two days remote per week are required.
Bachelor's
 Engineering Management (1) |
|---|
Get referred to DTCC
See people who can refer or advise you
- A minimum of 8 years of related experience.
- A bachelor's degree or equivalent experience.
- At least 8 years of experience with Amazon Web Services, network security, and system security.
- Demonstrated experience with cloud security tools including Aqua Security, Amazon Inspector, and Wiz.
- Experience securing Kubernetes, containers, workloads, and monitoring using Cloud-Native Application Protection Platform and Cloud Security Posture Management tools.
- Understanding of Terraform, continuous integration and continuous delivery, and deployment architectures.
- Experience with vulnerability management, Security Information and Event Management, security baseline compliance, and cloud and on-premises Identity and Access Management, including Active Directory, Ping, and Active Directory Federation Services.
- Familiarity with information security and cloud computing industry standards, guidelines, and regulatory compliance requirements, including NIST 800-53 and ISO 27001.
- Experience delivering reliable, available, and high-performance enterprise-scale solutions.
- Programming experience in one or more of Python, C#, C++, PowerShell, Bash, Terraform, and SQL.
- Experience with Git version control, including GitFlow, GitHub, or Bitbucket.
- One or more cloud or Certified Information Systems Security Professional certifications.
- Lead and mentor a team of cybersecurity engineers specializing in securing cloud assets, including workloads, containers, applications, and data.
- Align cloud security strategy with business objectives and regulatory requirements across Infrastructure as a Service, Platform as a Service, and Software as a Service.
- Identify deficiencies in cloud security services, propose improvement plans, and implement them.
- Identify opportunities for automation and improve artificial intelligence and machine learning capabilities across the technology stack.
- Evaluate and create cloud security baselines and implement monitoring to assure compliance.
- Document security policies, controls, and processes, and develop runbooks and how-to guides for operational readiness of engineered solutions.
- Partner with stakeholders to prepare new security technologies and functionalities for implementation in the production environment.
- Additional cloud computing experience with Microsoft Azure, Google Cloud Platform, and containerization.
DTCC is a centralized post-trade market infrastructure for the global financial services industry. It automates, centralizes, and standardizes the processing of financial transactions across asset classes, handling clearing, settlement, asset servicing, trade reporting, and data services. Its network spans 21 locations worldwide, serving thousands of broker/dealers, custodian banks, and asset managers, with industry ownership and governance that aims to reduce risk, increase transparency, and improve efficiency. The company operates through subsidiaries that process large-scale securities transactions ( trillions of dollars in value) and provides custody and asset servicing for issues from over 150 countries. Its Global Trade Repository processes billions of messages annually. DTCC's goal is to simplify market operations, enhance resilience, and support the broader move toward digital assets, while maintaining soundness and reliability for existing financial markets.
Company Size
1,001-5,000
Company Stage
N/A
Total Funding
N/A
Headquarters
New York City, New York
Founded
1973
Get referred to DTCC
See people who can refer or advise you
Simplify's Take
What believers are saying
- July 15, 2026 live tokenized trades proved repo, equities, ETFs, and Treasuries workflows.
- October 2026 launch follows SEC's December 2025 no-action letter, reducing regulatory friction.
- DTCC's 24/5 equities operations and tokenization push expand post-trade demand in 2026.
What critics are saying
- BitGo, Stellar, and Circle Arc fragment DTCC's tokenization stack before October 2026 launch.
- Settlement failures or workflow glitches in repo tokenization could freeze liquidity during expansion.
- If issuers bypass DTC rails, DTCC becomes a slower utility while blockchains capture settlement.
What makes DTCC unique
- DTC custodies $114 trillion and clears $4.7 quadrillion yearly through indispensable market plumbing.
- October 2026 tokenization service runs across Besu and Canton, preserving existing CUSIPs and rights.
- Fifty-plus firms, including BlackRock, JPMorgan, and Circle, validate DTCC's network effects.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Life Insurance
401(k) Retirement Plan
Unlimited Paid Time Off
Hybrid Work Options
Company News
The institutional pivot: why wall street's blockchain bets no longer need washington's permission. BlackRock, DTCC, Visa, and Mastercard are launching Circle Arc the day after the CLARITY Act is expected to fail. The money moved anyway - and the January 2027 enforcement cliff is now the only deadline that matters. Nolan Pratt Forkast mind | 2026-09-09 3:33 AM PDT The calendar that tells the story. On September 15, the U.S. Senate holds a cloture vote on the CLARITY Act. It is expected to fail. Polymarket odds for 2026 passage sit at 15%, down from approximately 90% in February, with $14.5 million in total volume. The following day, September 16, the Circle Arc mainnet goes live. That twenty-four-hour gap is the story. Not the vote count. Not the political drama. The infrastructure launch that happens regardless. Who is actually building. Arc is an open Layer-1 blockchain with native stablecoin gas (USDC), sub-second finality, and a permissioned validator set. The founding validator cohort reads like a Bloomberg terminal contact list: BlackRock, DTCC, Galaxy, Global Payments, ICE, Mastercard, MoneyGram, SBI Group, Standard Chartered, Sumitomo Corporation, Visa, and Circle. These are not sponsors. They are operators securing the network. The institutional signal is specific. BlackRock is expected to deploy BUIDL - its $3.2 billion tokenized liquidity fund - on Arc, using native USDC for 24/7 subscription and redemption. "Stablecoins and tokenized assets are inextricably linked within the future of financial market infrastructure," said Robert Mitchnick, BlackRock's Global Head of Digital Assets. "Purpose-built rails like Arc can support faster settlement, improved collateral mobility, and broader institutional adoption of digital assets." The DTCC, which custodies over $114 trillion in assets through its DTC subsidiary, is collaborating with Circle to tokenize DTC-custodied assets on Arc beginning in the second half of 2027. Limited production trades of tokenized assets began in July 2026; the full launch is scheduled for October. "Tokenization can have the greatest impact through open, interoperable networks like Arc that provide market participants with flexibility and choice while meeting our rigorous compliance, transaction throughput, and operational standards," said Frank LaSalla, DTCC President and CEO.
Southeast Asia blockchain funding doubles to $680M despite fewer deals. Southeast Asia's blockchain companies have raised $680 million in 2026, more than double the total for last year, even as the number of completed funding rounds has fallen sharply. * Blockchain companies have secured $680 million across 25 rounds in 2026. * Crypto.com's $400 million Series D supplied nearly 60% of the total. * Crypto financial services received $498 million across 19 funding rounds. * Singapore accounts for 82.5% of the region's $6.2 billion in historical funding. According to a new report from market intelligence platform Tracxn, funding has increased by about 113% from the $319 million raised throughout 2025. Deal volume moved in the opposite direction, falling to 25 rounds from 46 during the previous year. The gap between capital raised and completed rounds points to larger checks going into a smaller group of established companies. One transaction had an outsized effect: Crypto.com secured $400 million in a Series D round backed by Citadel Securities in July, accounting for nearly 60% of all blockchain funding recorded in Southeast Asia this year. Without the Crypto.com investment, the remaining 24 rounds brought in about $280 million. Tracxn's data therefore shows that the increase in total funding has not been spread evenly across the region's blockchain companies. Discover more Merchant Services & Payment Systems Deal activity has also moved far below its 2022 level. Investors completed 206 rounds that year, more than eight times the number recorded so far in 2026, while total funding reached a record $2.2 billion. Southeast Asia blockchain funding remains below its 2022 peak. Annual investment dropped from $2.2 billion in 2022 to $386 million in 2023, according to Tracxn. Funding recovered to $804 million in 2024 before declining to $319 million in 2025. Although the $680 million raised this year has already passed the 2025 total, it remains about 69% below the 2022 record. The number of rounds has also continued to fall, leaving the industry with more capital than last year but fewer companies receiving it. Crypto financial services have collected most of the available money. Companies in the segment raised $498 million through 19 rounds, with funding up 48.4% from the corresponding period last year, the report said. Tokenization platforms ranked second with $114 million, while platforms used to develop decentralized applications received $77 million. Tracxn's sector classifications indicate that investors have favored exchanges, payments companies, and other financial infrastructure providers over less established blockchain projects. Institutional activity outside Southeast Asia offers additional context for the interest in financial and tokenization companies. As crypto.news reported in August, the Depository Trust and Clearing Corporation has been developing a tokenization service with more than 50 financial firms in the United States, while JPMorgan, Citigroup, Bank of America, and Wells Fargo have been working on tokenized deposit infrastructure. The U.S. developments do not form part of Tracxn's Southeast Asian funding total. However, they show how established financial companies are putting capital and technical resources into many of the same business areas receiving investment in the region, including settlement, tokenized assets, and blockchain-based payments. Most blockchain companies remain below Series A. Funding becomes much harder to secure after the earliest stages of company development, Tracxn's figures show. Among 3,957 blockchain companies tracked across Southeast Asia, 1,323 have received some form of equity investment, but only 167 have reached Series A or a later stage. Just 50 companies have advanced to Series B, while 14 have completed a Series C round. Four companies have reached Series D or moved beyond it, including Crypto.com following its $400 million financing. The figures leave about 87% of equity-funded companies below Series A. Even among businesses that have attracted investors, only around 13% have progressed to a stage where larger institutional rounds usually become available. Later-stage concentration also appears in the size of the year's leading transaction. Crypto.com's round was larger than the combined $280 million raised through every other reported deal in 2026, giving one mature exchange more funding than the rest of the market combined. Southeast Asia has still produced six blockchain unicorns, according to Tracxn. The group includes digital asset bank Sygnum, Thai exchange Bitkub, blockchain gaming company Sky Mavis, and crypto financial services firm Amber Group. Sygnum reached a valuation above $1 billion after raising $58 million in early 2025. The company operates from Switzerland and Singapore and provides regulated digital asset services to institutional clients, including custody, trading, and tokenization products. Singapore controls most regional blockchain investment. Singapore accounts for 82.5% of Southeast Asia's cumulative $6.2 billion in blockchain funding, equal to approximately $5.1 billion, according to the report. The city-state is also home to 2,285 of the companies tracked by Tracxn, or nearly 58% of the regional total. Jakarta ranks as the next-largest funding center but accounts for only 3% of cumulative investment. Its share is roughly $186 million, leaving a substantial difference between Singapore and every other city in the region. Recent company activity has reinforced Singapore's position. Coinbase announced in July that it plans to expand its Singapore workforce from about 150 employees to approximately 200 by the end of 2026, citing institutional demand and tokenization among its areas of focus. Singapore's regulatory structure has also supported the development of licensed digital asset businesses. The Monetary Authority of Singapore introduced frameworks for tokenized fixed-income products and investment funds in November 2024 under Project Guardian, an initiative involving more than 40 financial institutions, industry groups and policymakers across seven jurisdictions. By the time the frameworks were announced, Project Guardian had completed more than 15 trials involving six currencies and several financial products. MAS also formed the Guardian Wholesale Network with Citi, HSBC, Standard Chartered, Schroders and UOB to support commercial uses of tokenized assets. Discover more exchange-traded funds (ETFs Currencies & Foreign Exchange Digital Currencies Acquisitions outnumber blockchain IPOs. Exit activity has leaned heavily toward acquisitions rather than public listings. Tracxn counted 43 acquisitions across Southeast Asia's blockchain industry but only four initial public offerings. Among the 2026 transactions, Japan's SBI Holdings completed its acquisition of Coinhako after receiving approval from MAS in July. The deal included a capital injection and purchases of shares from existing investors, although SBI did not disclose the stake size, investment amount, or valuation. Coinhako, founded in 2014, operates under a Major Payment Institution licence from MAS. SBI said the exchange would provide a regulated base for digital asset services involving stablecoins, tokenized products, cross-border trading and on-chain finance between Japan and Southeast Asia. Tracxn also listed Bybit's purchase of Indonesian crypto platform NOBI among the sector's acquisitions this year. The two transactions added to the region's 43 recorded takeovers, compared with four blockchain companies that have completed IPOs.
Southeast Asia blockchain funding remains below its 2022 peak. Annual investment dropped from $2.2 billion in 2022 to $386 million in 2023, according to Tracxn. Funding recovered to $804 million in 2024 before declining to $319 million in 2025. Although the $680 million raised this year has already passed the 2025 total, it remains about 69% below the 2022 record. The number of rounds has also continued to fall, leaving the industry with more capital than last year but fewer companies receiving it. Crypto financial services have collected most of the available money. Companies in the segment raised $498 million through 19 rounds, with funding up 48.4% from the corresponding period last year, the report said. Tokenization platforms ranked second with $114 million, while platforms used to develop decentralized applications received $77 million. Tracxn's sector classifications indicate that investors have favored exchanges, payments companies, and other financial infrastructure providers over less established blockchain projects. Institutional activity outside Southeast Asia offers additional context for the interest in financial and tokenization companies. As crypto.news reported in August, the Depository Trust and Clearing Corporation has been developing a tokenization service with more than 50 financial firms in the United States, while JPMorgan, Citigroup, Bank of America, and Wells Fargo have been working on tokenized deposit infrastructure. The U.S. developments do not form part of Tracxn's Southeast Asian funding total. However, they show how established financial companies are putting capital and technical resources into many of the same business areas receiving investment in the region, including settlement, tokenized assets, and blockchain-based payments. Most blockchain companies remain below Series A. Funding becomes much harder to secure after the earliest stages of company development, Tracxn's figures show. Among 3,957 blockchain companies tracked across Southeast Asia, 1,323 have received some form of equity investment, but only 167 have reached Series A or a later stage. Just 50 companies have advanced to Series B, while 14 have completed a Series C round. Four companies have reached Series D or moved beyond it, including Crypto.com following its $400 million financing. The figures leave about 87% of equity-funded companies below Series A. Even among businesses that have attracted investors, only around 13% have progressed to a stage where larger institutional rounds usually become available. Later-stage concentration also appears in the size of the year's leading transaction. Crypto.com's round was larger than the combined $280 million raised through every other reported deal in 2026, giving one mature exchange more funding than the rest of the market combined. Southeast Asia has still produced six blockchain unicorns, according to Tracxn. The group includes digital asset bank Sygnum, Thai exchange Bitkub, blockchain gaming company Sky Mavis, and crypto financial services firm Amber Group. Sygnum reached a valuation above $1 billion after raising $58 million in early 2025. The company operates from Switzerland and Singapore and provides regulated digital asset services to institutional clients, including custody, trading, and tokenization products. Singapore controls most regional blockchain investment. Singapore accounts for 82.5% of Southeast Asia's cumulative $6.2 billion in blockchain funding, equal to approximately $5.1 billion, according to the report. The city-state is also home to 2,285 of the companies tracked by Tracxn, or nearly 58% of the regional total. Jakarta ranks as the next-largest funding center but accounts for only 3% of cumulative investment. Its share is roughly $186 million, leaving a substantial difference between Singapore and every other city in the region. Recent company activity has reinforced Singapore's position. Coinbase announced in July that it plans to expand its Singapore workforce from about 150 employees to approximately 200 by the end of 2026, citing institutional demand and tokenization among its areas of focus. Singapore's regulatory structure has also supported the development of licensed digital asset businesses. The Monetary Authority of Singapore introduced frameworks for tokenized fixed-income products and investment funds in November 2024 under Project Guardian, an initiative involving more than 40 financial institutions, industry groups and policymakers across seven jurisdictions. By the time the frameworks were announced, Project Guardian had completed more than 15 trials involving six currencies and several financial products. MAS also formed the Guardian Wholesale Network with Citi, HSBC, Standard Chartered, Schroders and UOB to support commercial uses of tokenized assets. Acquisitions outnumber blockchain IPOs. Exit activity has leaned heavily toward acquisitions rather than public listings. Tracxn counted 43 acquisitions across Southeast Asia's blockchain industry but only four initial public offerings. Among the 2026 transactions, Japan's SBI Holdings completed its acquisition of Coinhako after receiving approval from MAS in July. The deal included a capital injection and purchases of shares from existing investors, although SBI did not disclose the stake size, investment amount, or valuation. Coinhako, founded in 2014, operates under a Major Payment Institution licence from MAS. SBI said the exchange would provide a regulated base for digital asset services involving stablecoins, tokenized products, cross-border trading and on-chain finance between Japan and Southeast Asia. Tracxn also listed Bybit's purchase of Indonesian crypto platform NOBI among the sector's acquisitions this year. The two transactions added to the region's 43 recorded takeovers, compared with four blockchain companies that have completed IPOs.
The Depository Trust & Clearing Corporation's tokenization service is set to launch commercially in October 2026, following production trades in July that tested collateral pledge, securities lending, and treasury workflows across over 30 firms. The service received SEC authorization in December 2025 via a three-year no-action letter. It runs on the ComposerX platform, using LFDT's Besu and the Canton Network for multi-chain operations. More than 50 firms now participate in the Industry Working Group, including BlackRock, JPMorgan, Goldman Sachs, and Circle. The focus has shifted from adoption to standardization. DTCC data shows $300 trillion in global high-quality liquid assets, with only 10-11% used as collateral. Digital Asset estimates the tokenized workflows could boost balance sheet efficiency by 30-50% through real-time collateral mobility.
DTCC partners with BitGo to launch digital asset infrastructure for tokenized US Treasuries and equities. The financial world's central plumbing system just went onchain, with BitGo providing wallet infrastructure for settlement of tokenized securities 2 hours ago Sponsored: CryptoSlots - Cryptoslots Play now! The Depository Trust & Clearing Corporation, the entity that quietly processes virtually every stock and bond trade in America, has taken its most consequential step into blockchain-based infrastructure. On July 15, DTCC's subsidiary The Depository Trust Company successfully converted eligible US Treasuries and equities into tokenized digital twins, with BitGo Bank & Trust serving as the custodian handling settlement and movement of those assets onchain. What actually happened on July 15. The milestone was part of DTCC's broader Tokenization Service, which converts traditional financial instruments into blockchain-native representations while maintaining their legal and economic properties. The July trades focused on repo and reverse repo workflows, the short-term lending markets where institutions borrow against Treasuries as collateral. Over 30 firms participated in the pilot, and the roster reads like a who's who of global finance. BlackRock, Goldman Sachs, and J.P. Morgan were among the institutions testing the interoperability and operational capabilities of the new system. BitGo holds a distinctive role in the arrangement. The company is the only OCC-regulated full-service qualified custodian integrated with the DTCC Tokenization Service. In practical terms, that means BitGo is the entity responsible for holding and moving the tokenized assets when trades settle, a function that requires both the technical capability to manage onchain wallets and the regulatory standing to custody institutional-grade securities. The official, full-scale launch of the DTC Tokenization Service is planned for October 2026. The path to this moment. This partnership didn't materialize overnight. In December 2025, the organization partnered with Digital Asset for tokenization on the Canton Network, laying groundwork for interoperable digital asset infrastructure across multiple blockchain environments. By May 2026, DTCC confirmed BitGo's involvement alongside more than 50 industry participants in the broader tokenization initiative. The July pilot narrowed the focus to live trades with real assets, proving the system works under actual market conditions rather than in sandboxed test environments. What this means for markets. The October launch will be a defining moment for institutional adoption of tokenized assets. When the entity that clears nearly all US securities transactions officially supports tokenized versions of those same instruments, it removes one of the biggest objections institutional players have had: counterparty and infrastructure risk. The risk to watch is execution. Moving from a 30-firm pilot to full production across the entire DTC ecosystem is a massive scaling challenge. Settlement failures in repo markets don't just cause inconvenience; they can trigger cascading liquidity problems. Disclosure: This article was edited by Editorial Team. For more information on how Crypto Briefing create and review content, see its Editorial Policy.