Staff Security Engineer

Thredd; London; Remote; GBP 60,000 - 100,000; Full time

Job summary

An innovative firm is seeking a Staff Security Engineer to enhance its cloud security landscape. In this pivotal role, you will collaborate with cross-functional teams to design secure environments for core production services. Your expertise in DevSecOps will drive automation of security processes and improve vulnerability management. You will be instrumental in implementing cloud security best practices and mentoring team members. This remote position offers a unique opportunity to make a significant impact in a dynamic environment, where your contributions will help shape the future of secure payment solutions for clients worldwide.

Qualifications

• Experience as a cloud security engineer in financial services is essential.
• In-depth knowledge of cloud security architecture and best practices.

Responsibilities

• Lead technical projects and develop security documentation.
• Implement cloud security best practices and manage incident handling.
• Automate security tasks and streamline cloud security operations.

Skills

Cloud Security Engineering

DevSecOps Practices

Security Automation

Vulnerability Management

Threat Modeling

Scripting (Python, PowerShell, Bash)

Encryption Technologies

Identity and Access Management (IAM)

Network Security

Compliance Frameworks (PCI-DSS, SOX)

Education

Experience in Financial Services Industry

Tools

AWS

EKS

Job description

Are you a Staff Security Engineer who can drive the continuous enhancement and safeguarding of our cloud security landscape?

What you'll be doing

Thredd is looking for a Staff Security Engineer to join our team! As our Staff Security Engineer, you'll collaborate with Thredd Platform Delivery and InfoSec teams to design secure environments for core production services.

You'll integrate DevSecOps principles, automate security processes like secret and container scanning, and enhance vulnerability management and threat modeling. Serving as both a subject matter expert and hands-on engineer, you'll improve Thredd's security posture, maintain security pipelines, and increase cybersecurity awareness by sharing insights and implementing effective controls.

Responsibilities

1. Leads technical projects by incorporating client requirements, aligning designs with client needs, and ensuring feedback integration for a client-first approach.
2. Develops and maintains security documentation, including architecture diagrams, enhances engineering workflows with data solutions, and establishes robust reporting mechanisms to track performance and outcomes.
3. Stay updated on the latest engineering trends and best practices, leveraging insights to influence projects and enhance organizational capabilities through engagement with industry professionals.
4. Recommends and implements cloud security best practices, such as CIS Benchmarks, manages security monitoring and incident handling, mentors team members in adopting new technologies and methodologies, and designs scalable engineering solutions that meet both technical and client requirements.
5. Prioritizes security tool outputs, develops tactical plans for engineering projects, manages resource allocation, and ensures timely delivery by aligning project timelines with broader engineering objectives.
6. Demonstrates advanced technical expertise in multiple domains, leads technical initiatives, contributes to product strategy discussions, and drives the adoption of best practices across engineering teams.
7. Implement secure cloud architectures for AWS environments, drives cybersecurity practices like vulnerability management and threat modeling, ensures compliance with regulatory requirements (e.g., PCI-DSS, SOX), and fosters a culture of quality within the engineering team.
8. Automate security tasks using modern tools and scripting to improve security posture, streamlines cloud security operations with Cloud SecOps practices, and protects revenue through robust cloud security measures.
9. Automate security validation within CI pipelines, including secret scanning and compliance checks, supports multi-cloud design (IaaS, PaaS, SaaS) and hybrid approaches for secure access across co-located and cloud workloads, and contributes to the technical vision by evaluating engineering strategies that align with organizational goals and market demand.

What you bring

1. Prior experience as cloud security engineer or equivalent within the financial services industry.
2. In-depth knowledge of cloud security architecture, best practices, and frameworks (e.g., NIST, CSA, CIS).
3. Experience with security automation, orchestration, and DevSecOps practices.
4. Must have in-depth exposure to EKS.
5. Proficiency in scripting and programming languages (e.g., Python, PowerShell, Bash) for security automation.
6. Strong understanding of encryption technologies, identity and access management (IAM), and network security in cloud environments.
7. Familiarity with compliance frameworks applicable to the financial services industry (e.g., PCI-DSS, SOX).

A bit about us ...

Thredd is the trusted next-gen payments partner for innovators looking to modernise their payments offering. Certified by Mastercard, Visa and Diners & Discover, we process billions of debit, prepaid, and credit transactions annually, supporting consumer and corporate fintechs, digital banks, and embedded finance providers across the globe. Our unique offering is our client-centric approach, combining hands-on support with modern, reliable, and scalable technology. Our assured solution accelerates the development and delivery of consumer and corporate payments components embedded within digital banks, as well as for expense management, B2B payments, crypto, lending, credit, Buy Now Pay Later, FX, remittance, and open banking innovators.

Other

This role is a remote role. Thredd operates in a secure environment and all candidates will be Credit and Background checked to the extent permitted by law. Only direct applicants will be considered for this role; we do not accept applications from recruitment agencies.