Senior DevSecOps Engineer

About This Opportunity

We are representing a confidential client in the financial services sector who is building their security engineering function from the ground up. This is a founding opportunity to establish DevSecOps capabilities within a regulated trading environment handling significant transaction volumes. Our client operates under CFTC oversight and requires someone who can bridge hands-on cloud security engineering with regulatory compliance requirements.

This role sits within Infrastructure and Engineering, protecting distributed, real-time trading systems. You'll be designing and implementing the security controls that enable engineering teams to ship quickly while meeting strict regulatory standards for their DCM/DCO entities.

Responsibilities

• Stand up security engineering capabilities from initial build through production go-live and ongoing maturation
• Design, build, and deploy security controls and guardrails across cloud-native platforms, including AI security solutions for customer-facing and internal products
• Automate security processes as code, embedding compliance and infrastructure-as-code checks into CI/CD pipelines
• Conduct risk audits and assessments, translating findings into actionable recommendations and implementing remediation
• Monitor and analyze system access logs, identify anomalies, and support incident response, containment, and root cause analysis
• Plan and test security backup and disaster recovery processes
• Develop and maintain security policies, standards, and controls meeting DCM/DCO regulatory requirements
• Maintain evidence and documentation to support regulatory examinations and audits
• Partner with business and engineering teams, translating technical security work for diverse audiences
• Build a culture of security ownership among engineers, acting as an enabler rather than a blocker

What We're Looking For

Required Experience and Skills:

• Hands-on experience building security engineering or DevSecOps capabilities in cloud-native, high-growth environments, ideally within financial services or exchange infrastructure
• Confident communicator able to articulate security risk, controls, and technical decisions to external stakeholders including auditors and regulators
• Familiarity with CFTC system safeguards expectations (17 C.F.R. § 38.1051 and § 39.18) or similar regulatory frameworks
• Strong grasp of application security principles including OWASP Top 10, NIST frameworks, and secure SDLC practices
• Proficiency with CI/CD tooling such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, or CircleCI
• Experience with security tools including Snyk, Aqua, Trivy, Checkov, Twistlock, or Clair
• Hands-on expertise securing AWS, Azure, or GCP environments, Kubernetes, containers, and infrastructure-as-code
• Working knowledge of compliance-as-code practices
• Proficiency in Python, Bash, or Go with demonstrated experience automating security processes

Valuable Additional Experience:

• Deploying AI security solutions and guardrails for customer-facing AI systems
• Certifications such as DSOP, CKS, CISSP, CCSP, CSSLP, or cloud security specialties
• Security automation at scale in Agile or Scrum environments
• Direct interaction with regulators or examiners on technology and system safeguards
• Familiarity with futures products under CFTC regulation

How We Work With You

When you apply through Get A Job.ai, our talent team reviews your background and conducts an initial screening conversation. If there's a strong match, we'll submit your profile to our client and coordinate the interview process on your behalf. The client's process typically includes a competency interview with the hiring manager followed by an in-office team meeting.

Please apply exclusively through Get A Job.ai. Do not attempt to contact the client directly, as this may disqualify your application. We manage all candidate communications and negotiations to ensure the best outcome for you.

Pay

Compensation details will be discussed during the screening process with our recruiting team based on your experience level and the client's approved budget for this role.

Location: London, hybrid working model (typically 3 days in office, 2 days remote)

Employment Type: Full-time, permanent

Get A Job.ai is an equal opportunity recruiter. We welcome applications from candidates of all backgrounds and are happy to discuss any accommodations you may need during the interview process.