At a Glance
- Tasks: Lead a team to build reusable security capabilities for engineering squads.
- Company: Join CMC Markets, a forward-thinking company prioritising security in tech.
- Benefits: Competitive salary, inclusive culture, and opportunities for professional growth.
- Other info: Dynamic role with a focus on innovation and career advancement.
- Why this job: Shape the future of security in cloud engineering and make a real impact.
- Qualifications: Experience in cloud security, CI/CD integration, and team leadership required.
The predicted salary is between 63000 - 77000 £ per year.
We are looking for a Security Platform Engineering Lead to define, build and operate a portfolio of reusable security capabilities that can be consumed by engineering squads as part of our product delivery. This role will combine technical leadership with hands-on engineering, ensuring that security controls are delivered as code, embedded into infrastructure and CI/CD pipelines, and aligned to our AWS first, Terraform led platform model. We are looking to expand and mature further our Platform Engineering capabilities by introducing a Security Platform Engineering team, with a goal to make secure by default the best and easiest path for squads building customer facing services. This team will engineer and operate reusable security capabilities as internal products, embedding security controls directly into infrastructure, CI/CD pipelines and service templates.
Working closely with Cloud Platform Engineering, Security Operations and other engineering squads, the function will focus on reducing risk through automation, consistency and developer experience. The successful candidate will be responsible for shaping the roadmap, forming the team to deliver it, driving adoption across build and run squads, and ensuring that security becomes a scalable, automated and measurable capability rather than a manual or reactive process.
ROLE AND RESPONSIBILITIES
- Work with the Head of Cloud and security stakeholders to define the strategic direction and technical vision of security platform engineering at CMC.
- Build and lead a small team responsible for delivering security capabilities as reusable platform “products”.
- Own the roadmap and technical delivery of these capabilities across cloud infrastructure, CI/CD, IAM, application integration patterns and more.
- Engage and collaborate with internal customers and understand up and coming use cases for the security platform.
- Deliver hands-on contributions to the platform; set technical standards and approach.
- Operate and support the security platform services with clear reliability expectations and continuous improvement.
- Drive measurable adoption of security platform services across engineering teams and report on coverage, risk reduction and maturity.
- Stay up-to-date on industry trends and emerging technologies and incorporate them into the platform roadmap as necessary.
- Mentor and coach the team through pairing, feedback and your behaviour.
KEY SKILLS AND EXPERIENCE
Required:
- Demonstrable experience in securing cloud native workloads, ideally within AWS and serverless architectures.
- Managing services required to deliver secure applications such as firewalls, package management and secrets management.
- Deep understanding of IAM, least privilege access design and secure service to service communication patterns.
- Integrating security controls into CI/CD pipelines, preferably using GitHub Actions.
- Enforcing security standards on Infrastructure as Code (e.g. via Policy as Code).
- Ability to translate regulatory or security policy requirements into practical, automated engineering controls.
- Leading team technical delivery in a cross-functional environment with multiple stakeholder groups.
- Building and operating security capabilities at scale to support product development.
Preferred:
- Experience writing Terraform to configure and manage security tooling and services.
- Experience with GitHub Advanced Security features such as code scanning, dependency review and secret scanning.
- Experience in developing hardened golden image pipelines for containers and virtual machines.
- Experience integrating Wiz or similar CNAPP tools into developer workflows.
- Experience delivering identity or access management capabilities as shared internal services.
- Experience operating in a Platform Engineering model supporting build and run squads in a regulated environment.
CMC Markets is an equal opportunities employer and positively encourages applications from suitably qualified and eligible candidates regardless of gender, sexual orientation, marital or civil partner status, gender reassignment, race, colour, nationality, ethnic or national origin, religion or belief, disability or age.
Security Platform Engineering Lead employer: CMC Markets
CMC Markets is an exceptional employer, offering a dynamic work environment where innovation and collaboration thrive. As a Senior Project Manager, you will have the opportunity to lead transformative projects in a regulated fintech landscape, supported by a culture that values professional growth and diversity. With a commitment to employee development and a focus on delivering impactful results, CMC Markets stands out as a rewarding place to advance your career.
StudySmarter Expert Advice🤫
We think this is how you could land Security Platform Engineering Lead
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including CMC Markets, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through CMC Markets
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at CMC Markets. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Security Platform Engineering Lead
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at CMC Markets insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to CMC Markets that you’re committed to staying ahead in the game.
How to prepare for a job interview at CMC Markets
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at CMC Markets to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at CMC Markets.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
