eCapital

Acquires specialty lenders, builds fintech platform

Security Engineer - Digital Assets

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeUnited StatesIn-person

About the Job

Requirements

A bachelor's degree in a relevant field or equivalent practical experience.
At least 7 years of experience in security engineering, application security, cloud security, or related cybersecurity roles.
Demonstrated experience securing digital assets, distributed ledger technology, or cryptographic systems.
Strong understanding of distributed systems, digital assets architecture, and cryptography.
Hands-on experience with Amazon Web Services, Kubernetes, Docker, Linux, and infrastructure security.
Experience in application and API security, secure coding, threat modeling, vulnerability assessment, and penetration testing.
Knowledge of key management, public key infrastructure, digital signatures, hardware security modules, or cloud key management services.
Proficiency in Python, Go, Java, TypeScript, or a comparable language.
Ability to communicate risk clearly and collaborate across technical teams.

Responsibilities

Design and maintain security controls across enterprise digital assets environments.
Conduct architecture reviews and threat modeling for digital assets technologies, applications, and integrations.
Assess risks associated with private and public digital asset networks, third-party platforms, and associated risks.
Evaluate consensus mechanisms, network communications, identity management, and trust boundaries.
Identify vulnerabilities in blockchain protocols and node configurations, and establish hardening baselines.
Review key generation, storage, rotation, recovery, and revocation practices.
Evaluate hardware security modules, cloud key management services, and secure signing architectures.
Protect private keys, digital signatures, certificates, and blockchain credentials.
Assess digital assets applications, APIs, and supporting services.
Partner with development teams on secure software development lifecycle and continuous integration/continuous delivery practices, code reviews, and remediation.
Review infrastructure as code and application authorization, business logic, and transaction integrity risks.
Develop testing approaches for blockchain-based applications and integrate automated gates into continuous integration/continuous delivery.
Secure workloads deployed on Amazon Web Services, Azure, and other applicable cloud platforms.
Assess security posture for Kubernetes, containers, network segmentation, identity and access management entitlements, secrets management, and infrastructure as code.
Implement hardening, vulnerability management, and continuous monitoring across environments.
Review third-party digital assets infrastructure and service dependencies.
Develop detection and monitoring for digital assets infrastructure and applications, and integrate telemetry with enterprise security information and event management.
Investigate suspicious activity, unauthorized access, and infrastructure anomalies.
Support incident response playbooks and tabletop exercises involving distributed systems and cryptographic assets.
Conduct technical risk assessments and support penetration testing.
Prioritize findings and drive remediation with Engineering and business stakeholders.
Maintain security standards, architecture documentation, and operating procedures.
Support applicable financial services regulatory and security framework requirements.

Desired Qualifications

Experience with digital assets networks, Daml, or relevant enterprise security distributed ledger technology.
Experience securing participant nodes, digital assets services, and distributed applications.
Experience reviewing and testing digitized assets.
Experience in financial services or regulated environments.
Familiarity with security information and event management solutions, security automation, and DevSecOps.
Relevant certifications such as Certified Information Systems Security Professional, Certified Secure Software Lifecycle Professional, or Amazon Web Services Security Specialty.

Who We Are:
We are on a mission to provide innovative working capital solutions to small and medium-size businesses throughout the United States, Canada, and the United Kingdom. A steady cash flow can change the course of a business and help a company define its future, promote growth, and impact the bottom line! As a leading provider of innovative funding solutions for small to medium sized businesses, we are one of the fastest growing companies in the industry. Through our Commercial Finance, Freight Factoring and ABL divisions, eCapital offers capital solutions to 80+ industries. We truly love to help our clients grow, and this is a position where you can grow too!

Summary:
eCapital is seeking an experienced and highly motivated Digital Assets Security Engineer to join our growing Cybersecurity team. As we expand our adoption of digital technologies, this role will play a critical part in designing, implementing, and maintaining security controls across our application and digital assets infrastructure, FinTech applications, and supporting cloud environments.

The ideal candidate brings expertise in blockchain enterprise security, cloud infrastructure, application security, cryptography, and secure software development. This is a hands-on role collaborating with Cybersecurity, Engineering, DevOps, and Infrastructure teams.

Responsibilities:
Blockchain & DLT Security

Design and maintain security controls across enterprise digital assets environments.
Conduct architecture reviews and threat modelling for digital assets technologies, applications, and integrations.
Assess risks associated with the private & public digital asset networks, third- party platforms and associated risks.
Evaluate consensus mechanisms, network communications, identity management, and trust boundaries.
Identify vulnerabilities in blockchain protocols and node configurations; establish hardening baselines.

Cryptography & Key Management

Review key generation, storage, rotation, recovery, and revocation practices.
Evaluate HSMs, cloud key management services and secure signing architectures.
Protect private keys, digital signatures, certificates, and blockchain credentials.

Application & Digital Assets Security

Assess digital assets applications, APIs and supporting services.
Partner with development teams on secure SDLC and CI/CD practices, code reviews, and remediation.
Review IaC and applications authorization, business logic, and transaction integrity risks.
Develop testing approaches for blockchain-based applications and integrate automated gates into CI/CD.

Cloud & Infrastructure Security

Secure workloads are deployed on AWS, Azure and other cloud platforms, as applicable.
Assess security posture for Kubernetes, containers, network segmentation, IAM entitlements, secrets management, and infrastructure as code (IaC).
Implement hardening, vulnerability management, and continuous monitoring across environments.
Review third-party digital assets infrastructure and service dependencies.

Security Monitoring & Incident Response

Develop detection and monitoring for digital assets infrastructure and applications; integrate telemetry with enterprise SIEM.
Investigate suspicious activity, unauthorized access, and infrastructure anomalies.
Support incident response playbooks and tabletop exercises involving distributed systems and cryptographic assets.

Security Governance & Risk Management

Conduct technical risk assessments and support penetration testing.
Prioritize findings and drive remediation with Engineering & business stakeholders.
Maintain security standards, architecture documentation, and operating procedures.
Support applicable financial services regulatory and applicable security frameworks’ requirements.

Required Qualifications

Bachelor’s degree in a relevant field or equivalent practical experience.

7+ years in security engineering, application security, cloud security, or related cybersecurity roles.

Demonstrated experience securing digital assets, DLT or cryptographic systems.

Strong understanding of distributed systems, digital assets architecture, and cryptography.

Hands-on AWS, Kubernetes, Docker, Linux, and infrastructure security experience.

Experience in application/API security, secure coding, threat modelling, vulnerability assessment, and penetration testing.

Knowledge of key management, PKI, digital signatures, HSMs, or cloud KMS.

Proficiency in Python, Go, Java, TypeScript, or a comparable language.

Ability to communicate risk clearly and collaborate across technical teams.

Preferred Qualifications

Digital assets networks, Daml, or relevant enterprise security DLT experience.

Experience securing participant nodes, digital assets services, and distributed applications.

Digitized assets review and testing experience.

Financial services or regulated-environment experience.

Familiarity with SIEM solutions, security automation, and DevSecOps.

Relevant certifications such as CISSP, CSSLP, or AWS Security Specialty.

We Bring:

Salary: $110,000 - $130,000USD
Annual Bonus
PTO
Health, Dental, and Life Benefits
401k Matching
Abundant professional development opportunities at a growing and thriving alternative Finance company!

eCapital Culture:
At eCapital, we're not just a funding provider—we're a strategic partner built for what's next. Our culture is defined by innovation, scalability, and personalized service. We value:

Agility: We adapt quickly to changing market conditions and customer needs.
Relationships: We put our clients' needs at the center of everything we do, and we believe the best results come from diverse teams working together.
Accountability: We hold ourselves to the highest standards in all aspects of our work.
Innovation: We constantly push boundaries to create better solutions for our clients.

You’ll work in a dynamic environment where your contributions will support eCapital’s growth and the small and medium-sized businesses we serve. Join us in improving how businesses access and manage capital.

eCapital values diverse experiences and backgrounds. We encourage all qualified candidates to apply, regardless of race, color, religion, gender, sexual orientation, national origin, genetics, disability, age, or veteran status.

AI Statement
eCapital uses AI-enabled tools within our applicant tracking system to support resume screening by comparing qualifications to job requirements. Final hiring decisions and resume reviews are always conducted by our recruiters.

Vacancy Type: Addition

About the Company

eCapital

Acquires specialty lenders, builds fintech platform

eCapital grows by acquiring specialized lenders and integrating them into its own tech platform to offer financing for small and medium-sized businesses. Its products include accounts receivable financing, freight factoring, commercial finance, and healthcare financing, all delivered through a centralized system that combines acquired portfolios. The company differentiates itself by using an aggressive M&A strategy to quickly assemble a broad suite of industry-specific financing solutions instead of building products from scratch. Its goal is to become a leading fintech powerhouse by expanding through targeted acquisitions and unifying under one brand across transportation, healthcare, and other sectors.

Company size: 201-500
Company stage: Debt Financing
Total funding: $388M
Headquarters: Aventura, FL
Founded: 1993

Recently Posted Jobs

Explore more opportunities at eCapital

See more jobs