Senior risk management engineer in London

A world without financial frictionOur Purpose: To empower everyone to access and move valueAt Yapily, we're building a powerful, scalable, and secure open banking infrastructure that redefines how the world interacts with value.Our open banking platform powers leading companies, such as Adyen, Intuit QuickBooks, and Google. By delivering payment initiation, bank data access, and pre-built products, we enable businesses to innovate fast and push the boundaries of financial technology.As an early pioneer of open banking, we're actively shaping the future of this industry with unrivalled expertise and a relentless focus on innovation.What We Are Looking ForAs a Senior DevSecOps Engineer, you will be a key driver in integrating security into every phase of our Software Development Lifecycle (SDLC). This role requires a proactive and automated approach to security—you will be laying down the foundational security posture, automating compliance checks, and ensuring we not only meet but exceed the security requirements necessary for regulated financial services.RequirementsResponsibilities: Secure Infrastructure & ComplianceAs a Senior DevSecOps Engineer, you will be responsible for:Designing, implementing, and enforcing automated security guardrails and policies across our entire cloud estate and CI/CD pipeline.Hardening and securing our Google Cloud Platform environment, including IAM policies, network security and resource configuration management.Compliance Automation: Working closely with compliance and governance teams to translate requirements into automated, verifiable infrastructure and deployment practices.Building and maintaining "golden path" templates for secure service deployment, enabling feature teams to confidently and safely push code without compromising security.Contributing expertise to the security incident response team, helping to swiftly and effectively manage and resolve security events.Expert knowledge of deploying, operating, and hardening Kubernetes (GKE) clusters, including network policies, container runtime security, and secrets management.Solid skills in writing, securing, and testing configuration using Terraform or OpenTofu.Proficient in at least one relevant language (Python, Golang, or Shell) for developing security automation and workflow tooling.CI/CD Guardrails: Proven ability to build secure, repeatable, and robust deployment pipelines (e.g., Relevant certifications such as Google Cloud Professional Security Engineer, CKS (Certified Kubernetes Security Specialist), or CISSP.BenefitsWhy You'll Love Working With UsCompetitive Pay & Equity – We offer a great base salary plus equity, so you'll own a part of what we're building together.Generous Time Off – Enjoy 25 days of holiday each year (plus bank holidays if you're in the UK), and earn an extra day each year after your first, up to 5 more!Hybrid Working – Life's about balance. you can work from home up to 3 days a week, eligibility criteria applies.Family First – We offer enhanced Maternity and Paternity leave because your family mattersPrivate Medical Insurance – You'll get top-notch cover through BUPA, because your health is a priority.Mental Health Support – Access personalised mental wellness support through our award-winning partner.Future-Ready Perks – Including a solid company pension, life assurance, and income protection.Cycle to Work Scheme – Commute the healthy way with support from our cycle to work programme.Refer a Friend – Bring someone great onboard and earn 1,000 with our referral scheme.Team Vibes – Monthly socials, team lunches, and a budget to hang out and have fun (yes, pizza included ð).Office Snacks & Doggies – Daily snacks to keep you going, and yes – we're proudly a dog-friendly office ð3⁄4.Job SummaryID: 98441C54B5Department: Engineering