Security Platform Lead: Automate & Scale Secure by Default

Devopsroles; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

CMC Markets seeks a Security Platform Engineering Manager to define, build and operate reusable security capabilities that engineering squads can consume as part of product delivery.

You will embed security controls into infrastructure and CI/CD pipelines, aligning to an AWS-first, Terraform-led platform model. Lead a small team, shape the roadmap and drive automated adoption across build and run squads.

Qualifications

• Experience securing cloud-native workloads, preferably in AWS serverless environments.
• Experience delivering secure applications using services like IAM, secrets management and firewalls.
• Ability to translate regulatory or security policy requirements into automated engineering controls.
• Hands-on delivery of security controls as code embedded in Infrastructure and CI/CD pipelines.

Responsibilities

• Define the strategic direction and technical vision of security platform engineering at CMC.
• Build and lead a small team delivering reusable security platform products.
• Own the roadmap and delivery across cloud infra, CI/CD, IAM and service integrations.
• Engage with internal customers to understand upcoming use cases for the security platform.
• Deliver hands-on contributions to the platform; set standards and approach.
• Operate and support security platform services with reliability, and drive continuous improvement.
• Drive measurable adoption across engineering teams and report on coverage, risk reduction and maturity.
• Stay up-to-date on industry trends and incorporate them into the roadmap as needed.
• Mentor and coach the team through pairing, feedback and behaviours.

Skills

Cloud security (AWS)

IAM least privilege

CI/CD security

IaC security

Policy as Code

Platform engineering

Security automation

Tools

Terraform

GitHub Actions

CNAPP tools (Wiz)

Job description

CMC Markets seeks a Security Platform Engineering Manager to define, build and operate reusable security capabilities that engineering squads can consume as part of product delivery.

You will embed security controls into infrastructure and CI/CD pipelines, aligning to an AWS-first, Terraform-led platform model. Lead a small team, shape the roadmap and drive automated adoption across build and run squads.