Lead DevSecOps Engineer
Job description
Our client is a pioneering company in the digital finance sector, focusing on the innovative landscape of digital assets. They are seeking skilled Senior Cybersecurity Engineer with extensive experience in Application and Cloud Security.
Our client has a foundation backed by a well-established global financial institution and is committed to delivering robust and scalable solutions across trading, asset management, and ventures. Their team thrives on responsible innovation in the crypto space, adhering to the highest standards of risk management, compliance, and commercial viability. The company culture is dynamic and open, enabling rapid adaptation to market needs and fostering a collaborative environment where insights are shared to enhance confidence in the institutional market.
About the Role:
Our client is seeking a highly skilled Senior Cybersecurity Engineer with extensive experience in Application and Cloud Security. The suitable candidate background DevSecOps, comprehensive knowledge of security best practices, and understanding of AWS Cloud security architecture. The candidate should also have hands-on experience in designing and configuring various cloud security processes, controls, automations, and technologies, coupled with the ability to communicate and organizational skills.
The successful candidate will play a crucial role in maintaining the security of my client's cloud-native environments. This role involves contributing to daily security operations, participating in design and project activities, and ensuring that all IT and digital assets comply with the company's security policies.
This is a unique opportunity for a cybersecurity professional passionate about cloud security to expand their technical knowledge and soft skills in the fast-evolving Web3 and crypto ecosystem.
Key Responsibilities:
Head and manage the daily operations of the client's Cloud Security environments.
Deploy and support various security tools and products, including CSPM, CNAPP, DevSecOps tooling, and automation.
Produce and implement corrective action plans to mitigate security risks.
Secure the development pipeline by integrating security measures, such as automating security checks, managing secrets, and ensuring compliance with SSDLC.
Architect and implement security solutions within AWS, leveraging AWS services and best practices, including secure container architectures and runtime security measures.
Research and resolve complex technical issues, proposing effective solutions.
Validate and implement cloud security controls, maintaining a secure cloud posture aligned with the firm’s risk appetite.
Collaborate on vulnerability remediation, perform continuous monitoring, and coach teams on patching and corrective actions.
Apply and govern the defined cybersecurity strategy within the public cloud infrastructure.
Generate and manage relevant KPIs and KRIs, providing action plans accordingly.
Work with cross-functional teams to assist the organisation in achieving certifications such as SOC2.
Contribute to regulatory reports related to incidents, red teaming exercises, and penetration testing.
Skills and Experience Required:
Bachelor's degree or higher in Computer Science or a related discipline is preferred.
Information Security certifications such as CISSP, CISM, or CEH are highly desirable.
Minimum of 5 years of experience in security roles within a technology environment.
Expertise in cybersecurity best practices.
Proficiency in secure application development processes and DevSecOps, including tools like Terraform, Ansible, Python, and Git.
Additional experience in other security domains such as IAM, PKI, Network Security, or Endpoint Security is a plus.
Hands-on experience in designing and implementing solutions in two or more of the following security domains: Cloud Security (AWS, GCP), Identity and Access Management, Key Management Services, Data Protection, Network/Perimeter/Endpoint Security.
Strong problem-solving skills and analytical thinking capabilities.
Ability to thrive in a fast-paced environment.
Demonstrable written and verbal communication skills.
Knowledge or interest in the Web3/Blockchain ecosystem is advantageous.
This role offers the chance to be at the forefront of cybersecurity in the digital finance sector, working within a forward-thinking and rapidly evolving company.
Salary: Up to GBP 110K per year
If you or anyone you know is keen to explore please reach out to me on bharath@tenten-partners,com
Equal Opportunity Statement
TENTEN Partners is an equal opportunity firm and is committed to providing equal employment opportunities to all qualified individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other protected characteristic as outlined by applicable laws.