At a Glance
- Tasks: Implement and operate security controls across multi-cloud environments and on-prem infrastructure.
- Company: Join Auros, a global leader in digital asset liquidity with a focus on security.
- Benefits: Enjoy remote work flexibility and direct ownership of impactful security projects.
- Other info: Be part of a small, technical team with immediate impact on the digital asset space.
- Why this job: Make a real difference in a fast-paced environment while working with cutting-edge technology.
- Qualifications: 8+ years in security engineering, strong IAM experience, and cloud security knowledge.
The predicted salary is between 48000 - 72000 £ per year.
Location: Remote UK/Euro
Reporting line: Chief Risk Officer
About Auros
Auros is a global digital asset liquidity provider operating 24/7 across centralised and decentralised markets. We run high-availability, low-latency systems where resilience and risk discipline matter. Security is treated as a core engineering and risk function, with direct engagement from senior leadership.
The Role
We’re hiring a hands‑on principal security engineer to implement and operate security controls across our infrastructure. This is a technical execution role where you’ll be writing code, configuring systems, and shipping security improvements, not writing policies or managing people. You’ll work closely with Infrastructure and Engineering teams to harden our cloud environments, secure our CI/CD pipelines, and protect both corporate and production systems. The scope is broad, the environment is fast‑paced, and you’ll be expected to own problems end‑to‑end. We believe security should enable the business, not obstruct it. You’ll design controls that are effective but unobtrusive, security that works in the background without creating friction for engineers or traders.
What You’ll Do
- Implement and maintain security controls across multi‑cloud environments (primarily AWS and Azure, with some GCP and AliCloud) and on‑prem infrastructure
- Own IAM strategy and implementation: design and enforce identity, access, and permissions models that are secure, scalable, and practical
- Design and operate key management and custody security controls such as HSMs, secrets management, and secure key handling for trading operations
- Harden CI/CD pipelines (GitLab) and secure the software delivery process
- Configure and operate corporate security tooling (endpoint protection, MDM/Jamf, DLP, identity management)
- Respond to security incidents: triage, investigate, contain, remediate
- Conduct security assessments of infrastructure and applications
- Automate security operations: detection, alerting, and response
- Work with Infrastructure to embed security into cloud provisioning and system configuration
What We’re Looking For
- 8+ years' hands‑on experience in security engineering or security operations
- Strong, opinionated views on IAM (you’ve designed and implemented identity and access management across cloud environments and have a clear philosophy on how it should work)
- Strong working knowledge of cloud security controls across multiple providers (AWS and Azure preferred)
- Experience securing CI/CD platforms, GitLab preferred
- Familiarity with corporate IT security tooling (Jamf, endpoint protection, DLP, SSO/IdP)
- Comfortable in Linux environments and scripting (Python, Bash, or similar)
- Experience with infrastructure‑as‑code (Terraform, Pulumi etc.) is a plus
- Exposure to financial services, crypto, or other regulated environments is a plus but not required
We value demonstrated skills and practical experience over certifications.
What You Get
- Direct ownership of security implementation
- A small, technical team where your work has immediate impact
- Exposure to low-latency trading infrastructure and the digital asset space
Principal Security Engineer employer: Auros
At Auros, we pride ourselves on being an exceptional employer that fosters innovation and collaboration in the dynamic world of cryptocurrency trading. Our remote work flexibility empowers employees to achieve a healthy work-life balance while engaging in cutting-edge projects that drive their professional growth. With a culture that values creativity and high-performance, we offer unique opportunities for our team members to excel in a fast-paced environment, making meaningful contributions to the future of trading technology.
StudySmarter Expert Advice🤫
We think this is how you could land Principal Security Engineer
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Auros, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Auros
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Auros. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Principal Security Engineer
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Auros insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Auros that you’re committed to staying ahead in the game.
How to prepare for a job interview at Auros
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Auros to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Auros.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
