Security Engineer

HQLAᵡ is an innovative financial technology firm that leverages Distributed Ledger Technology (DLT) to deliver efficiencies to the global securities finance and repo industry. Its platform enables banks and asset managers to achieve frictionless, precise, and real-time collateral mobility. Learn more at: https://www.hqla-x.com/.

To reinforce our Technology team, we are looking for a motivated Security Engineer.  HQLAᵡ has offices in Luxembourg (LU), Zug (CH) and London (UK). This opportunity exists in Luxembourg.

About the RoleHQLAx is seeking an experienced and hands-on Security Engineer to strengthen and evolve the security posture of our platform, infrastructure, and internal IT environments. The successful candidate will be responsible for designing, implementing, operating, and continuously improving security controls across applications, infrastructure, cloud services, containers, networks, endpoints, and operational processes. The role requires close collaboration with engineering, operations, and business stakeholders.

Key Responsibilities• Security Architecture & Engineering: Define secure architectures and standards, implement controls across endpoints, applications, and infrastructure (including software development infrastructure).

• Security Operations: Continuously maintain and improve the security posture through vulnerability and patch management, control testing, monitoring and detection; support investigations and post-incident reviews.
• Cryptography & Key Management: Design and oversee secure key, certificate, secrets and HSM services, ensure sound use of encryption and digital signatures, and guide cryptographic agility and post-quantum readiness
• Risk, Compliance & Governance: Translate technology risks, regulatory obligations and business needs into practical controls, support audits and SOC 2 compliance, and help maintain security policies and standards.
• Incident Response & Forensics: Coordinate incident response with internal and external teams, conduct technical and forensic investigations and root-cause analysis, and maintain playbooks, procedures and lessons learned.

Required Qualifications• Master’s degree in computer science, information security, cybersecurity, or a related field, with at least five years’ experience in a security engineering or comparable role.

• Proven ability to design, implement, and operate enterprise security controls across cloud, network, infrastructure, identity, applications, endpoints, Linux/macOS, containers, and Kubernetes.
• Strong expertise in cryptography, PKI, key and secrets management, HSMs, vulnerability and configuration management, governance and compliance, incident response, forensics, and secure software development/DevSecOps.
• Relevant certification such as CISSP, CISM, CCSP, GIAC, or equivalent.
• Hands-on, pragmatic, and self-motivated, with strong analytical and problem solving skills, clear English communication, and the ability to collaborate across technical and non-technical teams while balancing security, operational, and business priorities.

Preferred Qualifications The following would be considered advantageous: 

• Experience with blockchain, distributed ledger, or digital asset technologies.
• Experience working in regulated environments, particularly financial services or market infrastructure. 
• Experience with Hardware Security Modules (HSMs).
• Experience with, and knowledge of, post-quantum cryptography and cryptographic migration strategies.
• Experience supporting security audits, certifications, or regulatory reviews.
• Familiarity with cloud-native platforms, container orchestration, and modern DevSecOps toolchains.

• Work on mission-critical financial market infrastructure.
• Influence the security architecture of a highly innovative platform at the intersection of finance and technology.
• Collaborate with experienced engineering, DevOps, and business professionals. 
• Help shape the organization's future security strategy in an evolving regulatory and threat landscape.