Senior DevSecOps Engineer

Senior DevSecOps Engineer — Open Banking Infrastructure Platform 📍 London (Hybrid, 2 days in office) | 💰 Up to £90,000 + Equity About the Company Our client is an open banking infrastructure platform tackling one of financial services' oldest barriers: access. Card networks have long monopolised the movement of money, and banks have monopolised the data behind it — this company exists to challenge that, connecting growth-stage and enterprise businesses to thousands of banks worldwide. The platform already underpins household names in payments and fintech, and the business is post-Series B and revenue-generating, with a headcount of 150–200. To date it has raised around $70M across five funding rounds. Key Responsibilities Security Tooling & Guardrails — Select, integrate, and maintain security tooling across environments and CI/CD pipelines; design and enforce automated security guardrails across the cloud estateGCP Security — Harden and secure the GCP environment (IAM, network security); own resource configuration managementCompliance Automation — Partner with compliance/governance teams to translate requirements into automated practices; build verifiable infrastructure and deployment processesVulnerability & Patch Management — Automate identification and triage of vulnerabilities; work with engineering to remediate across infrastructure, apps and dependenciesDeveloper Empowerment — Build "golden path" templates for secure service deployment, enabling feature teams to ship confidently without compromising securityIncident Response — Contribute to the security incident response team, helping resolve security events swiftly Must-Haves Deep, practical experience securing high-availability infrastructure within GCPProficient in API security, including reviewing patterns and upskilling engineersExpert knowledge deploying, operating and hardening Kubernetes (GKE) — network policies, secrets managementStrong IaC skills (Terraform or OpenTofu)Hands-on with CSPM/CWPP/CNAPP tooling (Aqua Security, Falco, Prisma Cloud or similar)Proficient in Python, Golang or Shell for security automationProven track record building secure, repeatable CI/CD pipelines (GitLab CI, GitHub Actions) with mandatory security checks Nice-to-Haves Experience with fintech frameworks/certs — SOC2, ISO 27001, PCI DSS, DORAGoogle Cloud Professional Security Engineer, CKS, or CISSP