Principal Cybersecurity Engineer

We are looking for a Principal Cybersecurity Engineer to lead and scale the security function at BTC Markets - a digital asset exchange that's ISO 27001 certified and committed to best-in-class security, governance, and resilience.

As our security leader, you will own our end-to-end tactical cybersecurity across infrastructure, product, blockchain systems, and compliance. You will be both strategic and hands-on: leading initiatives that protect company assets, data, and infrastructure, while enabling safe and scalable growth in a high-trust environment.

This is an opportunity to shape the security culture of a growing fintech, work closely with executives and engineering, and build innovative controls in a blockchain-native context.

We are a secure, reliable platform that supports over 325,000 Australians, with more than $23 billion traded in cryptocurrencies and digital assets. We offer a flexible, inclusive, and dynamic work environment where our team members make a significant impact every day. We value a forward-thinking culture where innovation and growth are encouraged.

What You'll Do (but not limited to):

• Help define and execute a company-wide security strategy that aligns with regulatory obligations and business objectives.
• Lead and continuously evolve our ISMS program, including ownership of our ISO 27001 and all related audits, risk assessments, and policies.
• Oversee the security of the infrastructure, application, network and cloud services.
• Guide cryptographic strategy, including security controls for blockchain-based applications and smart contracts, secure key management and encryption protocols.
• Collaborate with engineering and product teams to embed security best practices into our SDLC - including threat modelling, secure code reviews, and automation. Improve and maintain security incident response and business continuity plans.
• Lead security investigations, root cause analyses, and remediation efforts.
• Build robust detection and monitoring capabilities to respond to internal and external threats.
• Monitor evolving threats in digital assets and blockchain and proactively enhance defences.
• Grow a security-first culture across the business.

Who You Are:

• 8+ years' experience in security engineering (fintech, blockchain, or regulated industries a plus).
• Tertiary degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• Relevant certifications (CISSP, CISM, OSCP, CCSP, etc.).
• Hands-on expertise in infrastructure, cloud security (Azure, AWS), and secure networking.
• Strong background in application security, secure software development, and DevSecOps.
• Deep knowledge of cryptography, key management, and secure financial systems.
• Experience with compliance frameworks (ISO 27001, SOC 2, GDPR, NIST CSF) and financial regulations (AML/CTF, data protection).
• Skilled at communicating complex risks to both technical teams and senior executives.
• Proven ability to lead cross-functional projects and security initiatives.
• Experience in security audits, threat assessments, vulnerability management, and pen testing coordination.
• Exposure to blockchain infrastructure or crypto-native security.
• Familiarity with governance structures and global regulatory environments.
• Long term aspiration of leading and growing the security function of the business.
• Full working rights in Australia.

Why Join Us?

• Flexible and hybrid work options to support your work-life balance.
• Be part of an exciting and rapidly growing blockchain company.
• Collaborate with a talented and passionate team in a supportive environment.
• Enjoy zero trading fees on our platform.
• Access monthly health and wellbeing allowances.
• Extra leave days – wellbeing leave, volunteering leave, and more.
• Participate in regular company catch-ups and social events.

If you are ready to take the next step in your career and make a real difference in the world of cybersecurity, apply now and join our innovative team