We are seeking a highly skilled and motivated DevSecOps Specialist to join our dynamic Cybersecurity team. The ideal candidate will integrate security practices into our infrastructure processes, ensuring that security is an integral part of our software development lifecycle. You will work closely with development, operations, and security teams to automate security processes, develop security protocols, and ensure compliance with industry standards.

Reporting to the Director of Security, this hands-on technical role will be working on a range of security projects and activities. You will be directly influencing the security posture of the company to ensure that security plays a key part in everything we do.

What you’ll be doing

• Integration of Security Practices:
  • Embed security measures into the CI/CD pipeline to ensure that security is incorporated at every stage of the software development lifecycle.
  • Develop and implement automated security testing during development, including static and dynamic code analysis, vulnerability scanning, and configuration management.
• Collaboration and Communication:
  • Work closely with development and operations teams to ensure secure design, development, and deployment of applications.
  • Collaborate with cross-functional teams to define and implement security controls and processes.
• Security Monitoring and Incident Response:
  • Monitor applications and infrastructure for security breaches and respond promptly to any security incidents.
  • Develop and maintain incident response plans and conduct regular security drills.
• Risk Management and Compliance:
  • Conduct regular security assessments and audits to identify vulnerabilities and ensure compliance with industry standards and regulations.
  • Implement and manage security policies, standards, and procedures to safeguard company assets.
• Continuous Improvement:
  • Stay updated with the latest security threats, trends, and technologies.
  • Advocate for security best practices and continuous improvement in security processes and tools.
• Tooling and Automation:
  • Select, build, implement, and manage security tools and technologies to enhance the security posture of the development and deployment processes.
  • Automate repetitive security tasks to improve efficiency and consistency.
• Day to Day:
  
  • Analyse applications, systems, and infrastructure to identify key security risks, and recommend and drive security improvements. 
  • Contribute to technical documentation, system design and product evaluations.
  • Be part of an on-call rota and provide support in the event of a security incident as required. 
  • Contribute to the development of security standards, threat modelling and security awareness and training.

Requirements

• 4+years experience in building and deploying Cloud workloads.
• Expertise in managing Infrastructure as a code and in using Terraform to deploy Cloud workloads.
• Hands on experience with containerised workloads (Kubernetes)
• Demonstrable experience with observability platforms, eg Datadog, Grafana, New Relic and in visualisation dashboard.
• Experience with CI/CD tooling.
• Good working knowledge of at least one security domain (e.g., identity and access management, data security, vulnerability management etc.). 
• Excellent oral and written communication skills.

Preferred, but not required

• Experience with SIEM and Threat Detection
• Experience in deploying security tools such as CSPM, CNAPP, Mend 
• Experience with AuthN and Z 
• Knowledge of security compliance standards/ frameworks such as MITRE, CIS, NIST CSF

Benefits

• Equity participation in our innovative mission to combat financial crime
• Unlimited Time Off Policy to promote work-life balance and well-being
• We embrace a hybrid approach that requires employees to be in the office for two days a week. We strongly believe that this approach fosters collaboration and enables the building of meaningful relationships
• Opportunities for collaboration and career development with smart, like-minded professionals
• Annual learning budget to support professional growth
• A home office budget to support working from home
• Enhanced parental leave and childcare benefits
• Life insurance and medical coverage through Vitality, including pre-existing conditions
• Pension contribution through The People’s Pension