Senior DevSecOps Engineer

About the role

This is a founding build. You'll stand up security engineering from the ground up through go‑live and mature it as we scale, working within Infrastructure and Engineering teams to build the controls, automation, and guardrails our trading systems and regulated entities need.

Key responsibilities

• Design, build and deploy security controls and guardrails across cloud‑native platforms, including AI security solutions.
• Automate security processes as code, embedding compliance and IaC checks into CI/CD pipelines.
• Conduct risk audits and assessments, translate findings into practical recommendations and implement them.
• Monitor system access logs, flag anomalies and support incident response and root‑cause analysis.
• Plan and test security backups and disaster‑recovery processes to ensure platform resilience.
• Develop and maintain security policies, standards and controls to meet DCM/DCO regulatory requirements.
• Partner with business and engineering teams, translating technical work for product and engineering audiences.
• Promote a culture of security ownership among engineers, acting as a security partner rather than a gatekeeper.

Required profile

• Hands‑on experience building security engineering/DevSecOps capabilities in a cloud‑native, high‑growth environment, preferably financial services.
• Comfortable communicating security risk, controls and technical decisions to auditors or regulators.
• Familiarity with CFTC system safeguards expectations and related regulatory requirements.
• Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices.
• Proficiency with CI/CD tooling and security tools such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI, Snyk, Aqua, Trivy, Checkov, Twistlock, Clair.
• Hands‑on expertise securing AWS, Azure, GCP, Kubernetes, containers and infrastructure‑as‑code.
• Experience automating security processes using Python, Bash or Go.

Required skills

• Python
• Bash
• Go
• AWS
• Azure
• GCP
• Kubernetes
• Docker
• Infrastructure as Code (IaC)
• Compliance as Code
• GitHub Actions
• GitLab CI
• Jenkins
• Azure DevOps
• CircleCI
• Snyk
• Aqua
• Trivy
• Checkov
• Twistlock
• Clair

What we offer

• Competitive salary and stock options vesting over four years.
• Pension scheme with up to 6 % matched contributions.
• Comprehensive health insurance for you and your family.
• Enhanced parental leave.
• Fresh chef‑made breakfast and lunch daily, plus snacks and drinks.
• Cycle‑to‑Work scheme and flexible hybrid working (3 days office, 2 days remote).
• £1,000 annual education budget for courses, conferences or books.
• 25 days paid holiday plus bank holidays, with the option to carry over five days.