Job Description

The CoinDCX Journey: Building Tomorrow, Today
At CoinDCX, we believe 'CHANGE STARTS TOGETHER'. You are the driving force that will help us make Web3 accessible to all. In the last six years, we have skyrocketed from being India's first crypto unicorn to carrying a community of over 125 million with us. To continue maximising the adoption and acceleration of Web3, we are now focused on developing cutting-edge products, addressing accessibility and security challenges, and bridging the gap between people and Web3 technologies.
While we go ahead and keep dominating the Web3 world, we would like to HODL you on our team! Join our team of passionate innovators who are breaking barriers and building the future of Web3. Together, we will make the complex simple, the inaccessible accessible, and the impossible possible. Boost your innovation to an ALL TIME HIGH with us!
Inside CoinDCX's IT Team
Our IT team ensures that CoinDCX's technological infrastructure is robust, reliable, and secure. We manage everything from network security to user support, enabling all teams to work efficiently. If you're a tech-savvy problem solver with a passion for IT, join us in keeping CoinDCX's operations running smoothly and securely.
You need to be a HODLer of these

• 18+ years of experience in information security, with at least 8 years in a senior leadership role.
• Strong knowledge of information security standards and frameworks (e.g., ISO 27001, NIST Cybersecurity Framework, CIS Controls).
• Proven experience in developing and implementing comprehensive information security programs.
• Strong knowledge of exchange architecture, Web3 risks, and smart contract vulnerabilities.
• Experience securing both centralized and decentralized products.
• Solid understanding of risk management principles and practices.
• Experience conducting security risk assessments and developing mitigation strategies.
• In-depth knowledge of regulatory requirements related to information security and data privacy.
• Strong leadership skills with the ability to inspire and motivate teams.
• Exceptional communication and interpersonal skills, with the ability to interact effectively at all levels of the organization.
• Analytical mindset with the ability to think critically and solve complex problems.
• Detail-oriented with strong organizational and project management skills.
• Ability to navigate and influence in a complex and fast-paced business environment.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) are highly desirable.
• High ethical standards and a commitment to maintaining confidentiality and integrity.
• Excellent business acumen and a commercial outlook.

You will be mining through these tasks

• Define and drive the security vision and roadmap across both CEX (Centralized Exchange) and DEX (Decentralised Exchange) operations.
• Serve as the executive voice on all cybersecurity, risk, and compliance matters.
• Build and lead a high-performing team across GRC, AppSec, DevSecOps, and detection & response.
• Develop and maintain a comprehensive enterprise risk management framework.
• Oversee compliance with ISO 27001, SOC 2, CCSS, and applicable crypto-specific regulations (e.g., FATF, MiCA, VDA guidelines in India).
• Manage risk assessments across on-chain protocols, custody infrastructure, and cloud services.
• Secure trading engine, matching system, order books, KYC/AML platforms, and backend APIs.
• Oversee user authentication, device trust, and account protection (MFA, anti-phishing, etc.).
• Ensure wallet segregation (hot, warm, cold), MPC/HSM integration, and transaction monitoring with risk-based approvals.
• Implement DDoS mitigation, rate limiting, and bot protection for web/mobile frontends.
• Oversee end-to-end smart contract security lifecycle: design review, threat modeling, formal verification, and audits.
• Monitor for protocol exploits, front-running, sandwich attacks, and liquidity manipulation.
• Define incident response for on-chain threats (e.g., governance attacks, oracle manipulation).
• Coordinate response to both traditional incidents (e.g., malware, access breaches) and blockchain-native incidents (e.g., contract exploits, bridge failures).
• Develop internal and external playbooks, including interaction with law enforcement and regulators.
• Define policies and architecture for secure custody, whether via in-house MPC/HSM or third-party platforms.
• Manage access control, key rotation, transaction signing quorum, and air-gapped cold storage strategies.
• Integrate security into CI/CD pipelines and SDLC across microservices and smart contract repositories.
• Ensure secure cloud infrastructure (AWS), container environments (Kubernetes), and identity platforms (e.g., JumpCloud)
• Collaborate with engineering/technology and other departments to integrate security measures into the organization's technology infrastructure and operations.
• Develop and manage the information security budget, ensuring efficient allocation of resources to high-priority initiatives.
• Stay current with emerging security threats and technologies, and adapt strategies accordingly to mitigate risks.
• Develop and implement a robust incident response plan to address potential security breaches and minimize impact.

Are you the one? Our missing block
? You are knowledge-hungry when it comes to VDA and Web3, always eager to dive deeper and stay ahead in this evolving space.
? The world of Web3 and VDA excites you, fueling your curiosity and driving you to explore new opportunities within this dynamic landscape.
? You act like an owner, constantly striving for excellence, impact, and tangible results in everything you do.
? You embrace a 'We over Me' mindset, growing individually while fostering the growth of those around you.
? Change is your catalyst, igniting your passion to build and innovate.
? You think outside the box, unbound by limitations or doubt, always pushing the boundaries of what's possible.
Perks That Empower You
Our benefits are designed to make a lasting impact on your life, giving you the freedom to create a work-life balance that truly suits you.

• Design Your Own Benefit: Tailor your perk package to fit your unique needs. Whether you're eyeing a new gadget or welcoming a furry friend into your life, our flexible benefits ensure that you can prioritize what matters most to you.
• Unlimited Wellness Leaves: We believe in the power of well-being. Take the time you need to recharge, knowing that your health is our priority. With unlimited wellness leaves, you can return refreshed, ready to build and grow.
• Mental Wellness Support: Your mental health is as important as your professional growth. Benefit from access to health experts, free counseling sessions, monthly wellness workshops, and regular team outings, all designed to help you stay balanced and connected.
• Bi-Weekly Learning Sessions: These sessions are more than just updates-they're opportunities to fuel your growth. Stay ahead with the latest industry knowledge, sharpen your skills, and accelerate your career in an ever-evolving landscape.

Skills Required