DevSecOps Engineer, London, Hybrid, Up to £90k base, Fintech, GCP

Space Executive; Greater London; Hybrid; GBP 81,000 - 99,000; Full time

Job summary

Space Executive is hiring a DevSecOps Engineer for a London-based, hybrid fintech platform on GCP and Kubernetes. You will embed security across the SDLC, automate compliance, and harden infrastructure to help engineers ship securely by default.

In this role you’ll own security tooling, build guardrails, secure IAM/network policies, translate compliance into automated practices, and support incident response to keep systems resilient and compliant.

Qualifications

• Hands-on security for high-availability GCP infrastructure.
• Expertise in API security and secure coding practices.
• Proficient in GKE, network policies, container runtime security, and secrets management.
• Proficient IaC using Terraform or OpenTofu.
• Experience with CSPM/CWPP/CNAPP tools (Aqua, Falco, Prisma Cloud or equivalents).
• Scripting in Python, Go, or Shell; building secure CI/CD pipelines (GitLab CI/GitHub Actions).
• Nice to have SOC2/ISO27001/PCI DSS or CISSP or related certs.

Responsibilities

• Own security tooling across environments and CI/CD pipelines.
• Engineering automated guardrails and policies across the cloud estate.
• Hardening GCP environment — IAM, network security, resource config.
• Turning compliance requirements into automated, verifiable practices.
• Running end-to-end vulnerability and patch management.
• Building "golden path" templates so feature teams can ship fast and safely.
• Supporting incident response when things do go wrong.

Skills

GCP security

API security

GKE security

IaC (Terraform/OpenTofu)

Security tooling

CI/CD security

Scripting (Python/Go/Shell)

Tools

Terraform

OpenTofu

Job description

DevSecOps Engineer | London (Hybrid) | Up to £90k | Fintech | GCP

We're hiring a DevSecOps Engineer to embed security across the entire SDLC for a highly available, multi-tenant platform running on GCP and Kubernetes. You'll set the foundational security posture for a regulated fintech environment — automating compliance, hardening infrastructure, and making it easy for engineers to ship securely by default.

What you'll be doing:

• Owning security tooling — selecting, integrating, and maintaining it across our environments and CI/CD pipelines
• Engineering automated guardrails and policies across the cloud estate
• Hardening our GCP environment — IAM, network security, resource config
• Turning compliance requirements into automated, verifiable practices
• Running end-to-end vulnerability and patch management
• Building "golden path" templates so feature teams can ship fast, safely
• Supporting incident response when things do go wrong

What you'll bring:

• Deep, hands-on experience securing high-availability GCP infrastructure
• API security chops — reviewing, patterning, and upskilling other engineers
• Expert-level GKE — network policies, container runtime security, secrets management
• Solid IaC skills (Terraform or OpenTofu)
• Experience with tools like Aqua Security, Falco, Prisma Cloud, or similar CSPM/CWPP/CNAPP
• Scripting fluency — Python, Go, or Shell
• A track record of building secure CI/CD pipelines with mandatory checks (GitLab CI, GitHub Actions)

Nice to have:

• SOC2, ISO 27001, PCI DSS, or DORA exposure
• GCP Professional Security Engineer, CKS, or CISSP