Senior Security Engineer: Risk, Cloud & AI Security Leader

CMG (Capital Markets Gateway); Greater London; Hybrid; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Equity

Hybrid work environment

Private medical and dental insurance

Pension contributions

Education reimbursement

Unlimited PTO

Job summary

Capital Markets Gateway LLC (CMG) is hiring a Senior Security Engineer to own security risk management, threat modeling, and governance initiatives. You will report to the CISO and drive cross‑program security work with senior leadership, building scalable processes for cloud, supply chain, and identity controls across a remote‑first, London‑proximate team.

The role emphasizes hands‑on risk management, design reviews, and collaboration to mature our security posture, including AI security

Qualifications

• 6+ years of hands-on security experience with risk management, threat modeling and design reviews.
• Experience delivering governance, risk & compliance programs including SOC 2.
• Thrives in startup/fast-paced environments with ownership of large initiatives.

Responsibilities

• Lead threat modeling across products, infrastructure and new initiatives.
• Conduct risk assessments and translate findings into prioritized remediation.
• Run security design and architecture reviews with Engineering and DevOps.
• Partner on customer due-diligence and SOC 2 Type II evidence gathering.
• Build repeatable security workflows embedded in existing engineering processes.
• Harden and secure Azure cloud environment and CI/CD pipelines.

Skills

Threat modeling

Risk assessments

Security design

SOC 2

Cloud security

Azure

CI/CD security

Scripting (Python/Bash/PowerShell)

Communication with leadership

Education

6+ years hands-on security

Tools

Azure

GitHub Enterprise Cloud

Entra ID

CI/CD tooling

Vanta/OSS tooling

Job description

Capital Markets Gateway LLC (CMG) is hiring a Senior Security Engineer to own security risk management, threat modeling, and governance initiatives. You will report to the CISO and drive cross‑program security work with senior leadership, building scalable processes for cloud, supply chain, and identity controls across a remote‑first, London‑proximate team.

The role emphasizes hands‑on risk management, design reviews, and collaboration to mature our security posture, including AI security