Senior DevSecOps Engineer
Overview
Smarkets is hiring a Senior DevSecOps Engineer to join the security team within Infrastructure and Engineering in London, United Kingdom. This position focuses on protecting the distributed, real-time systems behind the company's trading engine, with particular emphasis on DCM and DCO entities and CFTC-regulated business units. The role is a founding build to establish security engineering from the ground up through go-live and scale it over time. Visa sponsorship may be available for suitable candidates.
What you get
The position includes a competitive salary and benefits package designed around health, wealth, and development. Employees receive stock options vesting over a four-year period and a competitive pension scheme via Aviva with matched contributions up to six percent. Comprehensive health insurance is provided alongside enhanced maternity and paternity leave. Daily perks include fresh chef-made breakfast and lunch, fruit, snacks, tea, coffee, and soft drinks at the office, as well as a cycle-to-work scheme. Additional benefits include an annual education budget of one thousand pounds for courses, conferences, books, or training, twenty-five days of paid leave plus bank holidays with the option to carry over five days, and a hybrid working model consisting of three days in the office and two days working from home.
Requirements
Candidates need a background in security engineering or DevSecOps within a cloud-native, high-growth environment, ideally within financial services or exchange infrastructure. Applicants must be confident communicators capable of explaining security risks and technical decisions to external stakeholders like auditors or regulators, and have familiarity with CFTC system safeguards expectations or similar requirements. Strong application security foundations covering OWASP Top 10, NIST, and secure software development lifecycle practices are necessary. Proficiency is required in CI/CD tooling, security tools, cloud and container security for AWS, Azure, GCP, and Kubernetes, infrastructure-as-code, and compliance-as-code practices. Programming proficiency in at least one of Python, Bash, or Go with a track record of security automation is also required. Preferred qualifications include experience deploying AI security solutions, personal interest in sports, exchanges, or trading, relevant certifications, a track record of security automation in Agile environments, direct experience with regulators, and familiarity with prediction markets or novel futures products under the CFTC.