CISO & DevSecOps Architect — Security Engineering Lead

Smarkets; Greater London; Hybrid; GBP 120,000 - 190,000; Full time

Benefits offered by this job

Private health insurance

Pension (up to 6%)

£1,000 annual education budget

25 days annual leave + bank holidays (

Hybrid working, plus 20 remote days

In-house chef, daily snacks and drinks

Cycle to work scheme

Job summary

Smarkets is seeking a Head of Security Engineering to build security from the ground up within Infrastructure and Engineering, protecting the distributed real-time systems behind the trading engine.

Reporting to senior leadership and the Board, you will own security posture, risk management, incident response, and ensure regulatory standards including CFTC guidelines are met as we scale.

Qualifications

• Experience building security engineering/DevSecOps in cloud-native, high-growth environments.
• Excellent executive and regulatory communication.
• Familiarity with CFTC safeguards and related requirements.
• Strong knowledge of OWASP Top 10, NIST, and secure SDLC.

Responsibilities

• Establish and evolve Smarkets' security capabilities within Infrastructure and Engineering.
• Own regulatory/industry engagement (including CFTC).
• Define risk-based security strategy across cloud, applications, trading systems, and corporate environment.
• Lead incident response and post-incident analysis.
• Integrate security into SDLC with SAST/DAST/IA scanning in CI/CD.
• Implement controls across AWS, Kubernetes, containers, and IaC.
• Develop and maintain security policies meeting DCM/DCO requirements.
• Maintain evidence for regulatory examinations and audits.
• Partner with engineers to foster security ownership.

Skills

Security leadership

Executive communication

Regulatory compliance

App security

CI/CD tooling

Security tooling

Cloud security

Scripting languages

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

CircleCI

Job description

Smarkets is seeking a Head of Security Engineering to build security from the ground up within Infrastructure and Engineering, protecting the distributed real-time systems behind the trading engine.

Reporting to senior leadership and the Board, you will own security posture, risk management, incident response, and ensure regulatory standards including CFTC guidelines are met as we scale.