Be the senior hands-on security engineer at a wealthtech holding £9bn of client assets, with AWS, Kubernetes and operational resilience on the agenda.
The role
The platform provides investment accounts and pensions to 400,000 retail customers and holds around £9bn in client assets. It is regulated by the FCA, runs entirely on AWS and deploys to production around 60 times a day. The security team of five has so far focused on governance and audit, and what it lacks is a senior engineer who can harden the platform from inside the codebase. You will report to the Head of Security and work alongside the platform and SRE teams.
What you will do
Set the technical direction for cloud, application and identity security across 140 engineers.
Lead threat modelling on new products, starting with a self-invested personal pension launching next year.
Build guardrails into the CI/CD pipeline and Terraform modules so that secure defaults need no manual review.
Lead the response to serious incidents and run quarterly exercises with engineering leads.
Mentor two security engineers and help define the career path above senior level.
What you will bring
Deep hands-on experience securing AWS, with strong knowledge of IAM, KMS and network controls.
Production experience with Kubernetes and infrastructure as code.
The ability to read and write code, ideally in Go, Python or TypeScript.
Time in a regulated environment, with an understanding of what the FCA expects on operational resilience.
A practical approach. You would rather remove a risk with a well-designed control than a policy document.
The package
Base of £130,000 to £150,000, a 10% bonus, share options, an 8% pension and a £2,000 annual learning budget. Two days a week in the office near Old Street. The process runs to three stages over three weeks.
