Head of DevSecOps

Hyperlayer; Greater London; On-site; GBP 95,000 - 140,000; Full time

Benefits offered by this job

Performance-based bonus scheme.

25 days annual leave + bank holidays,

Birthday day off and tenure-based day

Critical illness and life insurance

AXA PPP Health Insurance

Cycle-to-work scheme

Referral bonus scheme

Workplace nursery scheme

Job summary

Hyperlayer is seeking a Head of DevSecOps in London to own security, reliability and delivery for our banking platform. You will lead a small team of DevOps engineers, embed security across the software lifecycle, and communicate security posture to both clients and the CTO.

You will shape strategies for how we build, ship and secure infrastructure and expand this remit as we grow into new markets, with strong emphasis on regulatory compliance and resilience.

Qualifications

• 7-15 years of experience in DevOps, platform or security engineering, including time leading or managing an engineering team.
• Hands-on experience with AWS/Azure/GCP, Terraform and containers/Kubernetes.
• A track record of building security into CI/CD pipelines and the wider software delivery lifecycle.
• Experience with ISO 27001, SOC 2 or PCI DSS.
• Ability to explain technical risk to non-technical colleagues, clients and auditors.
• Proficiency with AI tools in daily work (e.g., Claude, Claude Code or GitHub Copilot).
• Experience in FS/fintech or regulated environments, banking experience preferred.
• Familiarity with DORA or FCA operational resilience rules.
• Security certifications such as CISSP or CISM.
• Experience with policy‑as‑code, zero‑trust architecture or CSPM tools.
• Experience scaling a team and infrastructure during fast growth.

Responsibilities

• Lead, support and develop the DevOps team, fostering growth and high performance.
• Own the DevOps strategy and roadmap, embed security controls into CI/CD pipelines.
• Set direction for cloud infrastructure and infrastructure as code, keeping security and cost in check.
• Oversee platform reliability, observability, incident response, on-call and DR testing.
• Lead security certification and compliance work (ISO 27001, SOC 2, PCI DSS).
• Serve as security point of contact for clients and partners, handling audits and questionnaires.
• Collaborate with Engineering, Product and IT to manage vulnerabilities and risk.
• Keep CTO and leadership informed on security posture and platform health.

Skills

DevOps

Platform security

Team leadership

Cloud platforms (AWS/Azure/GCP)

CI/CD security

Security frameworks ISO 27001/SOC 2/PC

AI tools usage

Fintech/regulatory environment

DORA/FCA resilience regulations

Security certifications (CISSP/CISM)

Policy-as-code/zero-trust/CSPM

Scaling teams/infrastructure

Tools

Terraform

Kubernetes

Job description

About Hyperlayer

Hyperlayer is the intelligent banking platform built for the agentic economy: the financial control layer that sits above banks' existing cores, enabling next-generation Smart Accounts, without ripping anything out. From a single integration, we give financial institutions a secure rules and orchestration engine that lets them design, launch and scale hyper-personalised products in weeks while preserving stability, compliance and control. And there's nothing like us anywhere in the world.

Hyperlayer works with Tier 1 and Tier 2 FIs across the UK, US, EMEA and Hong Kong, with an award-winning UK consumer app (HyperJar) sitting in the group. We're creating the fintech category that every bank in the world needs: programmable, governed, agent-ready accounts. Your job is to make sure our audiences know that.

About the Role

As Head of DevSecOps, you'll own the security, reliability and delivery of the platform that Tier 1 and Tier 2 banks build their products on. Sitting in our Engineering team and reporting to the CTO, you'll lead our DevOps engineers (a team of 4) and set the direction for how we build, ship and secure our infrastructure, with security built into every stage of the software lifecycle rather than added at the end. You'll also be a trusted voice for our banking clients, helping them feel confident in how we protect their data and keep the platform running. As we expand into new markets, the role will grow to cover a larger team and a broader security and resilience remit.

This is an office-based role, with regular in-person collaboration in the office.

What You'll Do

• Lead, support and develop the DevOps team, creating an environment where engineers can do their best work and grow their skills.
• Own the DevOps strategy and roadmap, embedding security controls such as code and dependency scanning, container scanning and secrets management into our CI/CD pipelines.
• Set the direction for our cloud infrastructure and infrastructure as code, keeping the platform secure, scalable and cost-effective.
• Oversee platform reliability, including observability, incident response, on-call, disaster recovery and business continuity testing.
• Lead our security certification and compliance work (e.g. ISO 27001, SOC 2, PCI DSS) and help us meet the operational resilience expectations of our regulated clients.
• Act as the technical security point of contact for clients and partners, handling due-diligence questionnaires, audits and penetration test findings.
• Work with Engineering, Product and IT to manage vulnerabilities, access and risk, and build a security-aware culture across the business.
• Keep the CTO and leadership team informed on security posture, risk and platform health.

Qualifications

• 7-15 years of experience in DevOps, platform or security engineering, including time leading or managing an engineering team.
• Hands-on experience with at least one major cloud platform (AWS, Azure or GCP), infrastructure as code (e.g. Terraform) and containers/Kubernetes.
• A track record of building security into CI/CD pipelines and the wider software delivery lifecycle.
• Experience working to security or compliance frameworks such as ISO 27001, SOC 2 or PCI DSS.
• The ability to explain technical risk clearly to non-technical colleagues, clients and auditors.
• Confident, everyday use of AI tools in your work, such as Claude, Claude Code or GitHub Copilot.

• Experience in FS, fintech or another regulated environment, particularly working with banks.
• Familiarity with financial‑sector resilience regulation such as DORA or the FCA operational resilience rules.
• Security certifications such as CISSP, CISM or a cloud security certification.
• Experience with policy‑as‑code, zero‑trust architecture or cloud security posture management tools.
• Experience scaling a team and its infrastructure through a period of fast company growth.

Using AI at Hyperlayer

Hyperlayer is hyper-focused on making the most of AI across every workstream, and DevSecOps is no exception. In this role, you'll use AI coding assistants such as Claude Code to speed up infrastructure‑as‑code and pipeline work, and AI tools to help triage vulnerability findings, summarise incident timelines and draft responses to client security questionnaires. You'll also help shape how we use AI safely across Engineering, setting sensible guardrails for tooling, data and access.

Working at Hyperlayer

We value our team and are proud to offer some great benefits:

• A performance-based employee bonus scheme.
• 25 days annual leave plus bank holidays, a day off on your birthday, and an additional day per year of tenure to a maximum of 30.
• Critical illness and life insurance cover.
• AXA PPP Health Insurance, including gym offers.
• Cycle-to-work scheme.
• Referral bonus scheme.
• Workplace nursery scheme.

Applicants must have the right to work in the UK. We are unable to offer visa sponsorship for this role unless stated otherwise.

Equity, diversity, and inclusion

Hyperlayer's mission is to make a positive impact on people's lives, making it easier for everyone to manage their money.

Hyperlayer's commitment to equity, diversity, and inclusion is a key part of this; it helps us better serve our customers, employees, and business partners from every background.

We are constantly learning and striving to do better, and we expect all staff to actively take part in this process.

Data Privacy

As part of our recruitment process, Hyperlayer collects and processes personal data relating to job applicants.

We are committed to being transparent about how we collect and use this data and to meeting our data protection obligations. To read more click here.