At a Glance
- Tasks: Secure cloud environments and automate compliance in a high-impact role.
- Company: Innovative FinTech scale-up focused on security and engineering excellence.
- Benefits: Hybrid working, competitive salary, and opportunities for professional growth.
- Other info: Join a dynamic team and shape the future of secure cloud engineering.
- Why this job: Make a real impact on security culture in a rapidly growing company.
- Qualifications: Experience with GCP, Kubernetes, and CI/CD security practices.
The predicted salary is between 60000 - 80000 £ per year.
An innovative financial technology company is looking to hire a Senior DevSecOps Engineer to strengthen their security foundations across GCP, Kubernetes, CI/CD and compliance automation. This is a high-impact role where you’ll influence engineering standards, tooling, and security culture across the organisation.
The Role
As Senior DevSecOps Engineer, you will take ownership of embedding security into every stage of the SDLC.
You Will Be Responsible For:
- Owning and integrating security tooling across cloud environments and CI/CD pipelines
- Designing and enforcing automated security guardrails and policies
- Hardening and securing GCP environments (IAM, networking, resource configuration)
- Automating compliance checks and translating regulatory requirements into technical controls
- Leading vulnerability management and coordinating remediation with engineering teams
- Building secure “golden path” deployment templates for developers
- Supporting incident response activities and improving security readiness
What You’ll Bring:
- Deep hands‑on experience designing and securing infrastructure in Google Cloud Platform (GCP)
- Strong understanding of API security and secure design patterns
- Expert knowledge of Kubernetes security (ideally GKE), network policies, runtime security, secrets management
- Proficiency with Infrastructure as Code (Terraform or OpenTofu)
- Experience with security tooling such as Aqua, Falco, Prisma Cloud or similar CSPM/CWPP solutions
- Strong scripting/automation skills (Python, Golang or Shell)
- Proven experience building secure, robust CI/CD pipelines (GitLab CI, GitHub Actions, etc.)
Nice to Have:
- Experience working in regulated environments (SOC2, ISO 27001, PCI DSS, DORA, etc.)
- Relevant certifications such as GCP Security Engineer, CKS, CISSP
Hybrid working – 2 days per week in the London office. If you’re passionate about secure cloud engineering and want to make a real impact in a scaling FinTech, we’d love to hear from you.
We think you need these skills to ace DevSecOps Engineer in London
GCP (Google Cloud Platform)
Kubernetes Security
CI/CD Pipelines
Security Tooling (Aqua, Falco, Prisma Cloud)
Infrastructure as Code (Terraform or OpenTofu)
API Security
Scripting/Automation (Python, Golang, Shell)
