Senior Security Engineer - FinTech Cloud & AI Risk

Portage Ventures GP Inc.; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Intropic, a financial information and software company headquartered in London's Canary Wharf, seeks a senior security lead to own the security stack across cloud, endpoints, detection and response, compliance, IT, and AI agent safety. You will set priorities, you do the work, and you answer for the results, guiding engineers as the company grows.

This role involves hardening EKS, tuning detections, scoping pentests, and enabling safe access for coding agents with after-hours incident response

Qualifications

• 3+ years security experience spanning multiple domains.
• Advanced, hands-on knowledge of a wide range of AWS services (EC2, S3, GuardDuty, Lambda, ECS, EKS).
• Practical experience with Kubernetes, ideally EKS.
• Experience threat modelling web applications and responding to real security incidents.
• Experience using AI agents in security tooling or workflows.
• Understanding of SOC 2 and comfort with Git.
• Working knowledge of Jamf and endpoint management.
• Solid scripting ability in Python or Bash to automate tasks.

Responsibilities

• Security Engineering - 60%: secure cloud infra, detect/respond, CI/CD security checks.
• Secure AI agents and production generative AI systems; implement mitigations.
• Establish automated patching and guard against threats across cloud.
• GRC - 20%: own SOC 2, conduct annual web app pentest, automate evidence collection.
• IT - 20%: onboarding/offboarding automation, manage endpoints with Jamf/Intune, access requests.

Skills

Security engineering

AWS expertise

Kubernetes (EKS)

Threat modelling

AI security

SOC 2 familiarity

Scripting Python/Bash

IT administration

Tools

Jamf

Intune

GitLab

Google Workspace

Drata

Job description

Intropic, a financial information and software company headquartered in London's Canary Wharf, seeks a senior security lead to own the security stack across cloud, endpoints, detection and response, compliance, IT, and AI agent safety. You will set priorities, you do the work, and you answer for the results, guiding engineers as the company grows.

This role involves hardening EKS, tuning detections, scoping pentests, and enabling safe access for coding agents with after-hours incident response