Join to apply for the Platform Security Engineer role at Bondsmith
2 weeks ago Be among the first 25 applicants
Join to apply for the Platform Security Engineer role at Bondsmith
Get AI-powered advice on this job and more exclusive features.
About us
Bondsmith is a fast growing platform focused on helping customers make the most of their savings by offering access to a wide range of deposit products.
About us
Bondsmith is a fast growing platform focused on helping customers make the most of their savings by offering access to a wide range of deposit products.
We work with financial institutions like wealth managers, fintechs, banks, and advisors, providing them with tools to get better returns on cash, engage more effectively with clients, and simplify their operations. Our goal is to help savers get the most out of their cash.
At Bondsmith, our core values are rapid and continuous improvement, delivering good customer outcomes, and taking end to end ownership. Our team is made up of experienced professionals who are passionate about delivering excellent service and finding new ways to solve challenges in financial services. Joining us means working in a fast-paced environment where you will be making an impact on the financial lives of thousands of savers.
We’re regulated by the Financial Conduct Authority in the UK.
We are looking for a skilled and proactive DevSecOps Engineer to take ownership of our security frameworks, testing, and hands on implementation of secure systems. You will join our Engineering team to play a pivotal role in integrating security practices into the development lifecycle, ensuring that our software development processes are secure by design.
You will work closely with Development and Platform teams to embed robust security practices across the software development lifecycle (SDLC). This is a hands-on role that requires expertise in security testing, framework design, and automation, as well as a commitment to building a secure, scalable infrastructure.
This is a hybrid role - you will be required to work from the London office at least 3 days a week.
Key Responsibilities:
* Develop, implement, and maintain CI/CD pipelines using GitHub Actions. Automate testing and deployment processes to ensure high-quality releases.
* Implement and manage security controls across cloud infrastructure to protect data and applications.
* Regularly assess the security posture of applications and infrastructure, identifying and mitigating vulnerabilities.
* Continuously improve security using automated scanning and monitoring tools
* Create and maintain security policies, standards, and guidelines to ensure compliance and best practices across the organisation.
* Ensure that systems and processes comply with relevant regulatory requirements and industry standards.
* Establish and maintain monitoring systems for detecting threats and anomalies. Provide actionable insights to mitigate risks.
* Ensure that all stages of the development and deployment process are secure, from code commit to production release.
* Develop scripts and utilise automation tools to streamline security tasks and ensure consistent application of security measures.
* Collaborate with the teams to promote DevSecOps and security practices
* Keep abreast of emerging threats, vulnerabilities, and technologies to ensure the organisation remains protected.
Requirements:
* Experience with DevSecOps/Security tooling for CI/CD (Jenkins, GitHub Actions, ArgoCD)
* Proficient with IaC tools (Terraform, CloudFormation).
* Experience in securing cloud platforms (AWS/Azure/GCP) and containerisation technologies (Docker, Kubernetes) with a focus on security.
* Proficiency in Bash/Python
* Experience with microservice architecture and monitoring tools (ELK, Datadog)
* Understanding of secure coding practices, application security principles, and compliance frameworks.
* Hands-on experience in security tools (e.g., SAST, DAST, vulnerability scanners, OWASP ZAP, SonarQube, Snyk, Elastic Security, tfsec, AWS Inspector or Trivy).
* Experience in SIEM systems and threat detection.
* Financial services experience, especially in secure, resilient cloud platforms in regulated environments
* Excellent communication and problem-solving skills
Education and Certifications:
* Proven experience in DevSecOps, and/or security related role.
* Bachelors degree in Computer Science, Information Security, or a related field.
* Strong understanding of security principles and practices.
* (Desirable) AWS/Azure/GCP Security certifications, Certified Kubernetes Security Specialist (CKS), Certified Information Systems Security Professional (CISSP).
* (Desirable) Understanding of regulatory compliance requirements, for example, ISO 27001, GDPR, and other relevant regulatory standards.
About You: We’re looking for someone who is:
* Confident & Motivated: You take initiative and are eager to tackle new challenges.
* Independent: You’re comfortable working on tasks autonomously but enjoy collaborating with a team.
* Quick to Learn: You’re excited to dive into new technologies and constantly improve your skills.
* Team-Oriented: You value working with a high-performance team and contributing to a positive culture.
* Dedicated & Resourceful: You bring a strong work ethic and a solutions-oriented mindset.
* Customer-Focused: You’re driven by the chance to create solutions that make a difference for our customers.
What makes Bondsmith unique
* Early-stage startup: You will join an early-stage startup with less than 50 members. This means you’ll have an opportunity to make a real impact and shape the future of Bondsmith.
* Customer demand: Unlike other startups who are still finding their way and pivoting on products, we have strong demand from our enterprise clients for our products, we just need to keep building them.
* Next fintech growth story: We are doubling in headcount year on year and hiring across a range of positions
Company Benefits
* Competitive salary
* Healthcare
* Pension scheme
* Share scheme participation
* All the right equipment to make sure you’re working at your best
* Fun and social office in Shoreditch
* Deliveroo for working late in the office
Seniority level
* Seniority level
Not Applicable
Employment type
* Employment type
Full-time
Job function
* Industries
Technology, Information and Internet, Software Development, and IT Services and IT Consulting
Referrals increase your chances of interviewing at Bondsmith by 2x
Get notified about new Security Engineer jobs in London, England, United Kingdom.
London, England, United Kingdom 1 day ago
London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 3 days ago
London, England, United Kingdom 2 weeks ago
Greater London, England, United Kingdom 2 months ago
London, England, United Kingdom 1 week ago
London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 1 month ago
Security Operations Engineer - Corporate Security
London, England, United Kingdom 1 day ago
London, England, United Kingdom 2 months ago
London, England, United Kingdom 2 days ago
Greater London, England, United Kingdom 1 week ago
London, England, United Kingdom 4 months ago
City Of London, England, United Kingdom 2 days ago
City Of London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 1 month ago
London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 3 weeks ago
Greater London, England, United Kingdom 1 month ago
London, England, United Kingdom 2 months ago
London, England, United Kingdom 2 weeks ago
Uxbridge, England, United Kingdom 4 months ago
Harrow, England, United Kingdom 4 months ago
London, England, United Kingdom 2 months ago
Watford, England, United Kingdom 4 months ago
Redhill, England, United Kingdom 2 months ago
Bromley, England, United Kingdom 1 month ago
Bromley, England, United Kingdom 2 months ago
London, England, United Kingdom 1 week ago
Bromley, England, United Kingdom 2 months ago
London, England, United Kingdom 1 week ago
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
J-18808-Ljbffr