Chief Security Engineer — DevSecOps & Regulated Infra

Smarkets; England; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Stock Options

Pension Scheme

Health Insurance

Enhanced Parental Leave

Hybrid Working

Breakfast & Lunch

Cycle-to-Work Scheme

Education Budget

25 Days Holiday + bank holidays

Job summary

Smarkets is seeking an inaugural security engineering lead to build and scale our security program across trading systems and cloud infrastructure. You’ll work with Infrastructure and Engineering to implement security controls, incident response, and regulatory alignment with agencies including the CFTC.

Reporting to senior leadership, you’ll shape risk-based strategy, drive secure SDLC practices, and foster a culture of ownership over security across the organization.

Qualifications

• Hands-on experience building security engineering/DevSecOps in a cloud-native, high-growth environment.
• Familiarity with CFTC system safeguards and regulatory requirements.
• Strong knowledge of OWASP Top 10, NIST, and secure SDLC practices.

Responsibilities

• Establish and evolve Smarkets' security capabilities within Infrastructure and Engineering.
• Own regulatory and industry engagement (including CFTC).
• Define risk-based security strategy across cloud, apps, trading systems, and corporate.
• Lead investigations and post-incident analysis, coordinating remediation.
• Integrate security into the SDLC via SAST/DAST/IA C in CI/CD.
• Implement controls across AWS/GCP/Azure, Kubernetes, containers, and IaC.
• Develop security monitoring and documentation for audits.
• Partner with engineers to foster security ownership.

Skills

Security engineering

DevSecOps

Cloud-native security

CI/CD tooling

Scripting: Python/Bash/Go

Regulatory risk management

Communication with executives

Education

Certifications: CISSP/CSSLP/CCSP

Tools

Snyk

Aqua

Trivy

Checkov

Twistlock

Clair

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

CircleCI

Kubernetes

Terraform

Job description

Smarkets is seeking an inaugural security engineering lead to build and scale our security program across trading systems and cloud infrastructure. You’ll work with Infrastructure and Engineering to implement security controls, incident response, and regulatory alignment with agencies including the CFTC.

Reporting to senior leadership, you’ll shape risk-based strategy, drive secure SDLC practices, and foster a culture of ownership over security across the organization.