Senior AWS Security Engineer in London

Teya was founded on a simple belief: local businesses deserve better.

They are the cafés, restaurants, salons, shops and entrepreneurs that bring character to our high streets, create jobs and keep communities moving.

Yet for too long, financial services has made life harder for them - with clunky tools, poor support and complexity that gets in the way of running a business.

We're building a financial platform for local businesses across Europe - one built around simple tools, thoughtful design and real human support.

Our Members rely on us to help them run their business with confidence, and that responsibility shapes the way we work.

We care about quality. And we believe great performance and genuine hospitality should go hand in hand.

If you want to build meaningful products, solve real problems and make a genuine difference for local businesses, we'd love to hear from you Your mission We're a regulated payments fintech operating across multiple European markets, scaling into banking-licence territory.

Security Engineering is being rebuilt around a joint operating model with our platform and infrastructure teams.

We're hiring a Senior Security Engineer who can pick up specific gaps in our current coverage: payment cryptography operations on cloud-hosted HSM services, application security at scale, and pipeline-embedded controls that let the rest of the company move fast without security sitting in the critical path.

We're not looking for another pair of hands doing manual pen tests, PR reviews, or spreadsheet audits.

We want an engineer who builds, someone who writes production-quality Go, ships services, and turns manual security work into platforms other teams operate against.

Responsibilities Design, implement, and continuously improve a Secure SDLC integrated from design through production Embed security into planning and delivery via threat modelling, security requirements, and automated controls Lead application security reviews for new systems, major features, and high-risk changes across web, API, mobile, and backend services Define and maintain secure architecture patterns for authentication, authorisation, APIs, data protection, and multi-tenant isolation Own the application security tooling stack (SAST, DAST, SCA), integrating it into CI/CD with high-signal, low-noise outputs Partner with engineers to triage and remediate vulnerabilities based on exploitability, impact, and regulatory risk Work with Security Operations to improve application-level logging, telemetry, and incident response readiness Act as a trusted advisor to engineering teams, raising the bar through practical guidance, documentation, and targeted training Requirements5+ years in security engineering.

With a demonstrable track record of shipping platforms, not just performing reviews or writing policy.

You should be comfortable designing, writing, testing, and shipping production Go services.

Our platform is Go-native and we build our security tooling in the same stack.

Software engineering fundamentals.

Version control, code review, testing, CI/CD, observability, on-call for services you've built.

You are an engineer who does security, not a security person who occasionally scripts.

Hands-on experience with payment HSM services (cloud- hosted such as Virtu Crypt, AWS Cloud HSM, Google Cloud HSM; Application security at scale.

Familiarity with modern App Sec tooling (Snyk, Wiz, Veracode, Checkmarx, Semgrep, Git Hub Advanced Security or equivalents).

Cloud security depth on AWS.

IAM design, workload identity, network isolation, and integration patterns between application workloads and HSM-backed key services.

You will publish runbooks, standards, ADRs, and reporting dashboards.

Comfort with a small team carrying real regulatory scope.

Open source contributions or side projects, we would like to see how you write code before the technical interview.

Payments industry experience (card acquiring, issuing, PIN, EMV, terminal fleet operations).

Skin in the game is shared.

Application owners own their app's security posture.

We push back on unplanned demand with reasons The Perks We trust you, so we offer flexible working hours, as long it suits both you and your team; Health Insurance; Physical and mental health support through our partnership with My Fitness;25 days of Annual leave (+ Bank Holidays); Possibility to visit other Teya offices to meet colleagues in instances when travel is safe and appropriate; Friday lunch in the office; Friendly, comfortable and high-end work equipment and informal office environment; Hybrid work mode policy.

We are committed to creating an inclusive environment where everyone regardless of race, ethnicity, gender identity or expression, sexual orientation, age, disability, religion, or background can thrive and do their best work.