Head of Security Engineering (DevSecOps & CISO)

About the role

Smarkets is seeking its first dedicated security leader to build and run a security engineering function for its real‑time trading platform. Reporting to senior leadership and the Board, you will define and execute a risk‑based security strategy across cloud infrastructure, applications, and corporate systems while ensuring compliance with CFTC regulations.

Key responsibilities

• Establish and evolve security engineering capabilities within Infrastructure and Engineering teams.
• Engage with regulators (CFTC) and translate external requirements into internal controls.
• Lead incident investigation, containment, remediation and post‑mortem analysis.
• Integrate security testing (SAST, DAST, SCA, container/IaC scanning) into CI/CD pipelines without slowing delivery.
• Implement hardening controls for AWS, Azure, GCP, Kubernetes, containers and IaC.
• Develop security monitoring, detection, policies, standards and maintain evidence for audits.

Required profile

• Security expert with hands‑on experience building DevSecOps capabilities in a cloud‑native, high‑growth environment, preferably financial services.
• Excellent communication skills for executive, board and regulatory audiences.
• Familiarity with CFTC system safeguard expectations (e.g., 17 C.F.R. § 38.1051, § 39.18).
• Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices.

Required skills

• CI/CD tools: GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI.
• Security tools: Snyk, Aqua, Trivy, Checkov, Twistlock, Clair.
• Cloud platforms: AWS, Azure, GCP.
• Container orchestration: Kubernetes, Docker.
• Infrastructure as Code and related security scanning.
• Programming/scripting: Python, Bash, Go.

What we offer

• Competitive salary and equity (stock options vesting over 4 years).
• Pension scheme with up to 6 % matched contributions.
• Comprehensive health insurance for you and your family.
• Enhanced parental leave and flexible working (hybrid model).
• Fresh chef‑prepared meals, snacks, and a cycle‑to‑work scheme.
• £1,000 annual learning & development budget.
• 25 days paid holiday plus bank holidays, with the option to carry over 5 days.
• Opportunities for global remote work up to 20 days per year.