At a Glance
- Tasks: Lead cybersecurity initiatives and design secure software for high-stakes financial systems.
- Company: Bullish, a global digital asset platform focused on innovation and security.
- Benefits: Competitive salary, dynamic work environment, and opportunities for professional growth.
- Other info: Join a diverse team committed to integrity and innovation in the digital finance space.
- Why this job: Make a real impact in the fast-paced crypto landscape while shaping security architecture.
- Qualifications: 10+ years in cybersecurity with hands-on coding experience and strong technical expertise.
The predicted salary is between 81000 - 99000 £ per year.
Position Overview
About Bullish
Bullish is an institutionally focused global digital asset platform that provides market infrastructure and information services. These include:
- Bullish Exchange - a regulated and institutionally focused digital assets spot and derivatives exchange, integrating a high-performance central limit order book matching engine with automated market making to provide deep and predictable liquidity.
- CoinDesk Indices - a collection of tradable proprietary and single-asset benchmarks and indices that track the performance of digital assets for global institutions in the digital assets and traditional finance industries.
- CoinDesk Data - a broad suite of digital assets market data and analytics, providing real-time insights into prices, trends, and market dynamics.
- CoinDesk Insights - a digital asset media and events provider and operator of Coindesk.com, a digital media platform that covers news and insights about digital assets, the underlying markets, policy, and blockchain technology.
Reports to: CISO Americas
At Bullish, security is not a checkpoint, it is the foundation of trust that lets people move billions across our markets with confidence. The Bullish Security Architecture team secures Bullish Global, including the Bullish Exchange, Bullish Liquidity Services, CoinDesk Indices, CoinDesk Data, CoinDesk Media, and CoinDesk Events, designing the defenses that keep our mission-critical trading systems and other business lines resilient against the most capable adversaries in the world.
As a senior member on this team, you will sit at the intersection of cutting-edge engineering and high-stakes finance, shaping how secure software is built across web, API, mobile, and FIX platforms, and pushing our security bar beyond industry-leading. This is a senior technical leadership role, a hands-on application and cloud security architect who leads through influence, deep expertise, and mentorship. If you thrive on solving complex technical challenges in a fast-moving crypto landscape and building first-of-their-kind systems, this is where you will do the most impactful work of your career. This position is based in SoHo London and will be required to work full-time onsite.
Responsibilities
- Build complex threat models for critical systems and establish industry-leading cybersecurity requirements to turn ambiguity into clear, prioritized defenses.
- Partner closely with Product, Engineering, and Infrastructure teams to design and ship secure software across web, API, mobile, FIX, and trading platforms.
- Lead complex global security initiatives, build custom AI-powered tooling to maximize efficiency and scale the cybersecurity program.
- Assess vulnerability risks, deliver actionable recommendations across all technical levels, and track health metrics and KPIs for executive reporting.
- Drive high-impact projects and adapt to evolving business needs within a dynamic, fast-paced environment.
- Provide technical leadership and mentorship to the cybersecurity and engineering teams.
Experience & Qualifications
- 10+ years in cybersecurity, including 5+ years of hands-on coding, alongside deep expertise in threat modeling, pen testing, code reviews, and offensive security methodologies.
- Strong foundation in network protocols (IP, DNS, HTTP, SSL/TLS), cryptography (PKI, encryption at rest/in motion), Linux environments, and public cloud platforms (AWS, Azure, or GCP).
- Proficient in programming languages like C/C++, Java, JS, Python, Go, or Rust.
- Possess a deep understanding of common vulnerability frameworks (OWASP Top 10, SANS CWE Top 25).
- Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management, API traceability).
- Excellent ability to convey complex technical risks to non-technical executives and engineers and build strong cross-functional partnerships.
- A strong individual contributor with ability to drive projects independently from conception to complete with minimal oversight.
Nice to Have
- A restless drive to secure systems and continuously learn new technologies.
- Experience securing trading, financial-market, or other regulated, high-stakes systems.
- Relevant certifications, such as security architecture certifications (e.g. SABSA, TOGAF), offensive security (e.g. OSCP, OSCE, SANS, CREST) and cloud security specialty certifications (AWS, Azure, or GCP).
Bullish is proud to be an equal opportunity employer. We are fast evolving and striving towards being a globally-diverse community. With integrity at our core, our success is driven by a talented team of individuals and the different perspectives they are encouraged to bring to work every day.
Director, Senior Security Architect in City of Westminster employer: Bullish, Inc.
At Bullish, we pride ourselves on being an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration among world-class engineers. Located in London, our team thrives in a fast-paced environment where technical excellence is paramount, and employees are encouraged to take ownership of their projects while benefiting from continuous growth opportunities and mentorship. Join us to be part of a diverse community dedicated to shaping the future of digital assets with integrity and cutting-edge technology.
StudySmarter Expert Advice🤫
We think this is how you could land Director, Senior Security Architect in City of Westminster
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Bullish, Inc., love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Bullish, Inc.
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Bullish, Inc.. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Director, Senior Security Architect in City of Westminster
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Bullish, Inc. insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Bullish, Inc. that you’re committed to staying ahead in the game.
How to prepare for a job interview at Bullish, Inc.
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Bullish, Inc. to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Bullish, Inc..
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
