Director Security Engineering & Architecture

Location: Bengaluru

The CoinDCX Journey:
Building Tomorrow, today

At CoinDCX, we believe 'CHANGE STARTS TOGETHER'. You are the driving force that will help us make Web3 accessible to all.

In the last six years, we have skyrocketed from being India's first crypto unicorn to carrying a community of over 125 million with us. To continue maximising the adoption and acceleration of Web3, we are now focused on developing cutting-edge products, addressing accessibility and security challenges, and bridging the gap between people and Web3 technologies.

While we go ahead and keep dominating the Web3 world, we would like to HODL you on our team! Join our team of passionate innovators who are breaking barriers and building the future of Web
3. Together, we will make the complex simple, the inaccessible accessible, and the impossible possible. Boost your innovation to an ALL TIME HIGH with us!

Role Overview :

The Head of Security Engineering & Architecture is a crucial senior leadership position entrusted with the comprehensive responsibility for establishing, developing, and expanding the organization's security architecture, engineering frameworks, requisite technologies, and the secure-by-design strategic imperative. This leader will be instrumental in governing security across cloud environments, infrastructure, application portfolios, data assets, identity management, and nascent technologies, concurrently fostering business agility through the implementation of resilient, scalable, and contemporary security paradigms.

The preferred candidate must possess profound technical acumen, a proven history of managing high-performing teams, and the capacity to effectively influence executive leadership, engineering professionals, and product management stakeholders. They shall serve as the custodian of the enterprise security architecture roadmap, ensuring the consistent adoption of stringent security controls by engineering teams throughout the Software Development Life Cycle (SDLC).

You need to be a HODLer of these:

12+ years of experience in information security, with a minimum of 5–7 years in a leadership role overseeing security architecture or engineering teams.
One or more of industry certifications such as CISA, CISSP, CISM, CCSP etc
Strong business acumen, be able to understand business needs and advise stakeholders on appropriate security solutions
Good understanding of techniques and patterns for secure integration with external partners and service providers
Core Competencies (Strong hands-on understanding required):
Cloud security across major platforms (AWS, GCP).
Application and API security, including secure Software Development Lifecycle (SDLC) methodologies
Container and orchestration security (Kubernetes).
Identity and Access Management (IAM), Privileged Access Management (PAM), and modern identity protocols (OAuth2, OIDC, SAML).
Infrastructure and network security principles.
Data security practices, including Data Loss Prevention (DLP), encryption, key management, and tokenization.
Proven experience with large-scale distributed systems, high-availability infrastructure, and modern software engineering practices.
Leadership & Business

Skills:

Proven capability in establishing and guiding security architecture and engineering teams.
Extensive experience collaborating with C-suite executives, engineering leadership, and enterprise architects.
Demonstrated ability to judiciously balance competing factors, including risk, user experience, financial cost, and business speed.
Exceptional communication and persuasive skills.

Preferred Experience :
Understanding of crypto currency exchange operations, crypto security and secure key management best practices
Security consulting and/or audit experience
Hands-on engineering experience building custom security tools, automation platforms, or experience of Dev Ops
Background in financial services, fintech, or cryptocurrency/blockchain security
Advanced knowledge regarding common attacks, attack methods, and defense architectures.

Experience with Information Security policies and procedure development and implementation
Experience developing technical documentation, including reports and remediation…