Who We Are:We are on a mission to provide innovative working capital solutions to small and medium-size businesses throughout the United States, Canada, and the United Kingdom. A steady cash flow can change the course of a business and help a company define its future, promote growth, and impact the bottom line! As a leading provider of innovative funding solutions for small to medium sized businesses, we are one of the fastest growing companies in the industry.

Through our Commercial Finance, Freight Factoring and ABL divisions, eCapital offers capital solutions to 80+ industries. We truly love to help our clients grow, and this is a position where you can grow too! Summary:eCapital is seeking an experienced and highly motivated Digital Assets Security Engineer to join our growing Cybersecurity team.

As we expand our adoption of digital technologies, this role will play a critical part in designing, implementing, and maintaining security controls across our application and digital assets infrastructure, FinTech applications, and supporting cloud environments. The ideal candidate brings expertise in blockchain enterprise security, cloud infrastructure, application security, cryptography, and secure software development. This is a hands-on role collaborating with Cybersecurity, Engineering, DevOps, and Infrastructure teams.

Blockchain & DLT Security Design and maintain security controls across enterprise digital assets environments. Conduct architecture reviews and threat modelling for digital assets technologies, applications, and integrations. Assess risks associated with the private & public digital asset networks, third- party platforms and associated risks.

Evaluate consensus mechanisms, network communications, identity management, and trust boundaries.



Identify vulnerabilities in blockchain protocols and node configurations; Review key generation, storage, rotation, recovery, and revocation practices. Protect private keys, digital signatures, certificates, and blockchain credentials.

Application & Digital Assets Security Assess digital assets applications, APIs and supporting services.

Review

IaC and applications authorization, business logic, and transaction integrity risks. Cloud & Infrastructure Security Secure workloads are deployed on AWS, Azure and other cloud platforms, as applicable. Assess security posture for Kubernetes, containers, network segmentation, IAMentitlements, secrets management, and infrastructure as code (IaC). Review third-party digital assets infrastructure and service dependencies.

Security

Monitoring & Incident Response Develop detection and monitoring for digital assets infrastructure and applications; Support incident response playbooks and tabletop exercises involving distributed systems and cryptographic assets.

Security

Governance & Risk Management Conduct technical risk assessments and support penetration testing. Maintain security standards, architecture documentation, and operating procedures. Support applicable financial services regulatory and applicable security frameworks’ requirements.

Bachelor’s degree in a relevant field or equivalent practical experience. 7+ years in security engineering, application security,



cloud security, or related cybersecurity roles. Demonstrated experience securing digital assets, DLT or cryptographic systems. Strong understanding of distributed systems, digital assets architecture, and cryptography.

Hands-on AWS, Kubernetes, Docker, Linux, and infrastructure security experience.

Experience in application/API security, secure coding, threat modelling, vulnerability assessment, and penetration testing. Knowledge of key management, PKI, digital signatures, HSMs, or cloud KMS. Proficiency in Python, Go, Java, TypeScript, or a comparable language. Ability to communicate risk clearly and collaborate across technical teams. Digital assets networks, Daml, or relevant enterprise security DLT experience.

Experience securing participant nodes, digital assets services, and distributed applications. Digitized assets review and testing experience. Familiarity with SIEM solutions, security automation, and DevSecOps. Relevant certifications such as CISSP, CSSLP, or AWS Security Specialty.

Annual Bonus

Health, Dental, and Life Benefits Abundant professional development opportunities at a growing and thriving alternative Finance company! We adapt quickly to changing market conditions and customer needs. You’ll work in a dynamic setting where your contributions will support eCapital’s growth and the small and medium-sized businesses we serve.

We encourage all qualified candidates to apply, regardless of race, color, religion, gender, sexual orientation, national origin, genetics, disability, age, or veteran status. AI StatementeCapital uses AI-enabled tools within our applicant tracking system to support resume screening by comparing qualifications to job requirements.

📌 Security Engineer - Digital Assets (Winnipeg)
🏢 eCAPITAL
📍 Winnipeg