Senior DevSecOps Engineer

Smarkets · Londonsenior

En corto

▸Ingeniero de DevSecOps sénior que construye herramientas de seguridad desde cero en entornos cloud para un mercado de predicción regulado.
▸Diseña controles automatizados, auditorías de riesgo y guarda la infraestructura en tiempo real, con foco en cumplimiento regulatorio (CFTC).
▸Destaca por tener un rol fundacional: crear la ingeniería de seguridad desde cero, no solo mantenerla.

Comfortable communicating security risk, controls and technical decisions verbally and in

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓Experiencia práctica en DevSecOps en entornos cloud-nativos y de alto crecimiento.
✓Conocimiento aplicado de seguridad en aplicaciones (OWASP Top 10, NIST) y ciclos de vida seguros.
✓Familiaridad con regulaciones CFTC (17 C.F.R. § 38.1051 y § 39.18).
✓Habilidades sólidas en CI/CD y herramientas de seguridad (Snyk, Aqua, Trivy, etc.).
✓Experiencia en seguridad en AWS/Azure/GCP, Kubernetes y contenedores.
✓Capacidad para automatizar procesos de seguridad con Python, Bash o Go.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

GitHub ActionsGitLab CIJenkinsAzure DevOpsCircleCISnykAquaTrivyCheckovTwistlock

¿A quién escribirle en Smarkets?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

Who are we? Smarkets: Predicting the Future of Betting Smarkets is a prediction market exchange for sports and political trading, having handled over $50 billion in volume since 2010. We're upending sports betting with the fairest prices, the best technology, and a superior customer experience, powered by attracting great people and building a high-performance environment where they thrive. We're looking for an atypical candidate with strong regulated-business experience to support our growing CFTC business. The Team Security sits within Infrastructure and Engineering, protecting the distributed, real-time systems behind our trading engine. The team's remit spans our core products and our DCM/DCO entities, with a real regulatory dimension to the work, particularly around our CFTC-regulated business units. Alongside that regulatory scope, the focus is squarely on hands-on engineering: designing, building, and shipping the security tooling and controls that let engineering teams move fast safely. About the Role: This is a founding build. You'll stand up security engineering from the ground up through go-live and mature it as we scale, working within Infrastructure and Engineering teams to build the controls, automation, and guardrails our trading systems and regulated entities need. What you will do: Build the Foundations: Be part of a founding build, standing up security engineering from the ground up through go-live and maturing it as we scale, working within Infrastructure and Engineering teams. Design Guardrails: Design, build, and deploy security controls and guardrails across cloud-native platforms, including AI security solutions protecting customer-facing and internal products. Automate as Code: Automate security processes as code, embedding compliance and infrastructure-as-code checks into CI/CD pipelines without slowing down frequent shipping. Assess & Remediate: Conduct risk audits and assessments, translating findings into practical recommendations for engineering teams, and be hands-on in implementing those recommendations. Monitor & Respond: Monitor and analyse system access logs, flag anomalies, and support incident response, containment, and post-incident root cause analysis. Plan for Resilience: Plan and test security backups and disaster recovery processes to keep the platform resilient. Maintain Compliance: Develop and maintain security policies, standards, and controls meeting DCM/DCO requirements, and maintain evidence and documentation to support regulatory examinations and audits. Partner Across Teams: Partner with business and engineering teams on solutions, translating technical work for product and engineering audiences. Champion Ownership: Build a culture of security ownership among engineers, acting as a security partner rather than a gatekeeper. Requirements: Security Engineering Background: Hands-on experience building security engineering/DevSecOps capabilities in a cloud-native, high-growth environment, ideally financial services or exchange infrastructure. Confident Communicator: Comfortable communicating security risk, controls and technical decisions verbally and in writing to external stakeholders such as auditors or regulators. R. § 38.1051 and § 39.18 or similar regulatory requirements. AppSec Foundations: Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices. CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI) and security tools (Snyk, Aqua, Trivy, Checkov, Twistlock, Clair). Cloud & Container Security: Hands-on expertise securing AWS/Azure/GCP, Kubernetes, containers, and IaC. Compliance as Code: Working knowledge of infrastructure-as-code and compliance-as-code practices.

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.