DevSecOps Engineer: Secure Fintech on GCP, Hybrid London

Space Executive; Greater London; Hybrid; GBP 81,000 - 99,000; Full time

Job summary

Space Executive is hiring a DevSecOps Engineer for a London-based, hybrid fintech platform on GCP and Kubernetes. You will embed security across the SDLC, automate compliance, and harden infrastructure to help engineers ship securely by default.

In this role you’ll own security tooling, build guardrails, secure IAM/network policies, translate compliance into automated practices, and support incident response to keep systems resilient and compliant.

Qualifications

• Hands-on security for high-availability GCP infrastructure.
• Expertise in API security and secure coding practices.
• Proficient in GKE, network policies, container runtime security, and secrets management.
• Proficient IaC using Terraform or OpenTofu.
• Experience with CSPM/CWPP/CNAPP tools (Aqua, Falco, Prisma Cloud or equivalents).
• Scripting in Python, Go, or Shell; building secure CI/CD pipelines (GitLab CI/GitHub Actions).
• Nice to have SOC2/ISO27001/PCI DSS or CISSP or related certs.

Responsibilities

• Own security tooling across environments and CI/CD pipelines.
• Engineering automated guardrails and policies across the cloud estate.
• Hardening GCP environment — IAM, network security, resource config.
• Turning compliance requirements into automated, verifiable practices.
• Running end-to-end vulnerability and patch management.
• Building "golden path" templates so feature teams can ship fast and safely.
• Supporting incident response when things do go wrong.

Skills

GCP security

API security

GKE security

IaC (Terraform/OpenTofu)

Security tooling

CI/CD security

Scripting (Python/Go/Shell)

Tools

Terraform

OpenTofu

Job description

Space Executive is hiring a DevSecOps Engineer for a London-based, hybrid fintech platform on GCP and Kubernetes. You will embed security across the SDLC, automate compliance, and harden infrastructure to help engineers ship securely by default.

In this role you’ll own security tooling, build guardrails, secure IAM/network policies, translate compliance into automated practices, and support incident response to keep systems resilient and compliant.