Security Engineer

About BTSE:

BTSE Group is a global leader in fintech and blockchain technology, anchored by three core business pillars: Exchange, Payments, and Infrastructure Development. Serving over 100 corporate clients worldwide, we provide white-label exchange and payment solutions. Our offerings encompass everything from exchange infrastructure hosting and development to custody, wallets, payments, blockchain integration, trading, and more. We are looking for talented professionals in marketing, operations, customer support, and other departments. The roles offered may be on-site, remote, or hybrid, in collaboration with our local partner.

About the Opportunity:

We are looking for an Enterprise Security Engineer to manage and secure our cloud infrastructure, data center infrastructure, and server environments. This role is primarily focused on cloud security, with on-premise/data center environments as a secondary but required scope. This role is primarily AWS-based, with experience in other cloud platforms considered a plus. This is a highly autonomous role that requires strong independent judgment, proactive problem-solving, and the ability to drive cross-functional initiatives.

• Proactively identify security gaps, risks, and inefficiencies across cloud and on-premise environments, and independently lead security initiatives and projects — from proposing solutions through execution — coordinating with stakeholders across Cloud, DevOps, and other functions
• Own and manage cloud-native security monitoring, threat detection, and posture management, with equivalent coverage extended to on-premise/data center environments
• Own and manage a centralized identity and access management platform, including permission structures, session policies, and organization-level policy guardrails, following least-privilege principles
• Design and enforce encryption policies for data at rest and in transit, and conduct periodic access reviews and recertification across cloud and on-premise resources
• Own the end-to-end vulnerability management lifecycle — scanning, identification, prioritization, remediation coordination, verification, and reporting — for both cloud and on-premise infrastructure
• Define and enforce server hardening standards and security baselines across cloud and on-premise environments, and secure containerized environments including image vulnerability scanning, runtime security, and network policies
• Develop and maintain automation scripts, tools, and frameworks to streamline security processes
• Participate in incident response activities, investigate security incidents, and conduct root cause analysis

#LI-MC1