Senior Security Engineer in London

Since being founded in 2018, Copper has been building the standard for institutional digital asset infrastructure with a focus on custody, collateral management, and prime services.

Led by Amar Kuchinad, Copper's Global CEO, the firm provides a comprehensive suite of custody, trading and settlement solutions that reduce counterparty risk and bring greater capital and operational efficiency to digital asset markets.

At the heart of Copper's offering is Multi-Party Computation (MPC) technology - the gold standard in secure custody.

Copper's multi-award winning custody system is unique in that it can be connected to centralised exchanges, De Fi applications and even staking pools without the assets leaving the custody.

Built on top of this state-of-the-art custody, Clear Loop is the first solution in the market that overcomes a growing industry challenge; counterparty risk with exchanges.

This solution underpins a full prime services offering, connecting global exchanges, and enabling customers to trade and settle directly from the safety of their MPC-secured wallets.

By reducing settlement time for transfers to a few milliseconds (without blockchain network dependency) and offering enhanced security measures, Clear Loop is rapidly reshaping the way asset managers trade and manage capital.

In addition to industry-leading security certifications, Copper has one of the strongest insurance coverages in the industry from an A+ rated insurer, positioning the firm as the partner of choice for institutions seeking to safeguard their assets.

Department Purpose

We aim to achieve a balance between corporate culture and start-up culture, and at the same time be close to product solutions.

Therefore, we divide our department into small self-sufficient teams that can make decisions on their own.

This applies to all stages of product production: from conceptualisation to architecture, to build, to release, to iteration and support.

Team Purpose

Copper's Information Security department keep the business' systems and network resources secure and protect the company, employees, and client data.

The Infrastructure Security team focuses on providing objective oversight and validation of Copper's infrastructure security controls and processes.

Role Purpose

As a Senior Security Engineer , you will play a key role in strengthening Copper's security posture through the design, implementation, and continuous improvement of security controls, identity services, cloud security solutions, and governance processes.

Working closely with technology, infrastructure, and business teams, you will lead initiatives to protect Copper's systems, data, and digital assets.

You will be responsible for enhancing our security capabilities across identity and access management, cloud platforms, endpoint security, vulnerability management, automation, and security monitoring, ensuring security controls remain effective, scalable, and aligned to business and regulatory requirements.

This is a hands‑on technical role requiring strong security engineering expertise, a proactive approach to risk reduction, and the ability to influence security best practices across the organisation.

• Identity and Access Management (IAM)
• Design, implement, and maintain Identity and Access Management (IAM) solutions, including Microsoft Entra ID, Entra Identity Governance, AWS IAM Identity Centre, and supporting authentication and authorisation services.
• Manage permission settings and access controls to ensure secure and efficient user access to company resources.
• Security Systems Configuration and Analysis
• Ensure security systems are configured according to specified requirements and industry best practices.
• Assess security configurations across cloud and endpoint platforms, benchmark controls against CIS, STIG, SOC2, and internal security standards, and drive remediation activities to improve security posture.
• Security Solution Inventory and Maintenance
• Own the administration, configuration, and lifecycle management of security platforms across cloud, endpoint, identity, and network domains.
• Maintain accurate inventories of security tooling and integrations.
• Evaluate new technologies and recommend enhancements to improve security effectiveness and operational efficiency.
• Partner with vendors and internal stakeholders to troubleshoot issues and maximise platform value.
• Security Practices and Technical Advice
• Act as a trusted security advisor to technical teams, business stakeholders, and senior leadership, providing guidance on security architecture, risk reduction, and regulatory compliance.
• Provide technical advice on security measures and potential enhancements.
• Create or update policies and procedures to align with industry regulations and best practices.
• Security Risk Management
• Manage vulnerability management activities across cloud infrastructure, endpoints, Saa S applications, and identity platforms using tools such as Wi
• #J-18808-Ljbffr