20 hours ago
London, United KingdomStaff+
Responsibilities
- Build threat models for critical systems and establish prioritized cybersecurity requirements.
- Partner with Product, Engineering, and Infrastructure teams to design and ship secure software across web, API, mobile, FIX, and trading platforms.
- Lead global security initiatives and build custom AI-powered tooling to scale the cybersecurity program.
- Assess vulnerability risks, provide actionable recommendations, and track security health metrics and KPIs for executive reporting.
- Drive high-impact security projects in a dynamic environment.
- Provide technical leadership and mentorship to cybersecurity and engineering teams.
Requirements
- 10+ years of cybersecurity experience, including 5+ years of hands-on coding.
- Deep expertise in threat modeling, penetration testing, code reviews, and offensive security methodologies.
- Strong knowledge of IP, DNS, HTTP, SSL/TLS, cryptography, PKI, encryption at rest and in motion, Linux, and public cloud platforms.
- Proficiency in one or more of C/C++, Java, JavaScript, Python, Go, or Rust.
- Understanding of OWASP Top 10 and SANS CWE Top 25 vulnerability frameworks.
- Knowledge of enterprise software development, CI/CD pipelines, and security tooling including SAST, DAST, OSA, vulnerability management, and API traceability.
- Ability to communicate complex technical risks to executives and engineers and build cross-functional partnerships.
- Ability to independently drive projects from conception to completion with minimal oversight.
- Preferred qualifications include experience securing trading, financial-market, regulated, or other high-stakes systems and certifications such as SABSA, TOGAF, OSCP, OSCE, SANS, CREST, or cloud security specialty certifications.
Benefits
- Full-time onsite work in SoHo, London.
- Equal opportunity employer committed to a globally diverse workplace.
About Bullish
Bullish operates a regulated digital asset platform for institutional and professional investors, built around a spot and derivatives exchange that combines a central limit order book with automated market making. It is regulated by BaFin (Germany), the Hong Kong SFC, and the Gibraltar Financial Services Commission. Bullish also owns CoinDesk, including CoinDesk Indices, market data products, and a digital media and events business.