Senior DevSecOps Engineer

Space Executive; Greater London; On-site; GBP 70,000 - 120,000; Full time

Job summary

Space Executive is seeking a security-focused software engineer to harden high-availability infrastructure on GCP, automate compliance, and secure CI/CD pipelines. You will implement guardrails, review API security, and lead incident response efforts while enabling teams to ship securely.

Ideal candidates have deep GCP security expertise, strong IaC skills with Terraform/OpenTofu, and hands-on experience with CSPM/CWPP/CNAPP tools like Aqua, Falco or Prisma Cloud..Ability to work with Python or

Qualifications

• Must-Haves: practical experience securing high-availability infrastructure within GCP.
• Must-Haves: API security, reviewing patterns and upskilling engineers.
• Must-Haves: expert Kubernetes (GKE) deployment, operation and hardening.
• Must-Haves: strong IaC skills (Terraform/OpenTofu).
• Must-Haves: CSPM/CWPP/CNAPP tooling (Aqua, Falco, Prisma Cloud).
• Must-Haves: Python, Golang or Shell for security automation.
• Must-Haves: proven track record building secure CI/CD pipelines with security checks.

Responsibilities

• Security Tooling & Guardrails across environments and CI/CD pipelines.
• Hardening GCP security; IAM and network security; manage resource configuration.
• Automation of compliance practices; verifiable infra and deployment processes.
• Vulnerability and patch management; triage and remediation with engineering teams.
• Develop golden templates for secure service deployment to empower feature teams.
• Contribute to the security incident response team and resolve events swiftly.

Skills

GCP Security

API Security

Kubernetes(GKE)

Terraform/OpenTofu

Security Automation

Python/Shell

CI/CD Security

Secure CI/CD Pipelines

Cloud Security Tools

Tools

Aqua Security

Falco

Prisma Cloud

Job description

About the Company

Our client is an open banking infrastructure platform tackling one of financial services' oldest barriers: access. Card networks have long monopolised the movement of money, and banks have monopolised the data behind it — this company exists to challenge that, connecting growth-stage and enterprise businesses to thousands of banks worldwide.

The platform already underpins household names in payments and fintech, and the business is post-Series B and revenue-generating, with a headcount of 150–200. To date it has raised around $70M across five funding rounds.

Key Responsibilities

• Security Tooling & Guardrails — Select, integrate, and maintain security tooling across environments and CI/CD pipelines; design and enforce automated security guardrails across the cloud estate
• GCP Security — Harden and secure the GCP environment (IAM, network security); own resource configuration management
• Compliance Automation — Partner with compliance/governance teams to translate requirements into automated practices; build verifiable infrastructure and deployment processes
• Vulnerability & Patch Management — Automate identification and triage of vulnerabilities; work with engineering to remediate across infrastructure, apps and dependencies
• Developer Empowerment — Build "golden path" templates for secure service deployment, enabling feature teams to ship confidently without compromising security
• Incident Response — Contribute to the security incident response team, helping resolve security events swiftly

Must-Haves

• Deep, practical experience securing high-availability infrastructure within GCP
• Proficient in API security, including reviewing patterns and upskilling engineers
• Expert knowledge deploying, operating and hardening Kubernetes (GKE) — network policies, secrets management
• Strong IaC skills (Terraform or OpenTofu)
• Hands-on with CSPM/CWPP/CNAPP tooling (Aqua Security, Falco, Prisma Cloud or similar)
• Proficient in Python, Golang or Shell for security automation
• Proven track record building secure, repeatable CI/CD pipelines (GitLab CI, GitHub Actions) with mandatory security checks

Nice-to-Haves

• Experience with fintech frameworks/certs — SOC2, ISO 27001, PCI DSS, DORA
• Google Cloud Professional Security Engineer, CKS, or CISSP