Senior Security Engineer

Our client is building a cloud-native exchange and clearing platform where security, resilience, and trust are fundamental. They are seeking their first Senior Security Engineer to help build something significant from the ground up.

This opportunity is ideal for an entrepreneurial, hands-on security leader who thrives in an early-stage environment, embraces ambiguity and calculated risk, and is motivated by the challenge of creating rather than inheriting. The successful candidate will have the opportunity to shape the security architecture, establish foundational capabilities, and directly influence the success of a new financial market infrastructure platform.
This is not a traditional corporate security role; it requires initiative, resourcefulness, independent judgment, and a genuine appetite for building.

Key Responsibilities

1. Cloud & Infrastructure Security: Design and implement security architecture across cloud environments, including IAM, SSO/MFA, privileged access, encryption, key and secrets management, endpoint protection, and infrastructure guardrails.
2. Network & Data Protection: Establish network segmentation, zero-trust access, secure member connectivity, WAF/DDoS protections, and safeguards for sensitive trading, clearing, and client data.
3. Security Testing & Assurance: Establish vulnerability management, penetration testing, security assessments, and remediation processes; ensure findings are prioritized and resolved.
4. Application & AI Security: Embed security into software development and CI/CD workflows. Secure AI-enabled tools and development processes against data leakage, prompt injection, and model supply-chain risks.
5. Detection & Operational Resilience: Build logging, monitoring, threat detection, and incident response capabilities. Establish security practices that support 24/7 operations, business continuity, disaster recovery, and resilience testing.
6. Governance & Compliance: Establish security policies, controls, and audit-ready evidence aligned with SOC 2, ISO 27001, NIST, and applicable financial market regulations. Build a scalable security program that evolves with the business.

Requirements

1. 8 years of hands-on security engineering experience, including securing production cloud environments (AWS, Google Cloud Platform, or Azure).
2. Demonstrated experience building or maturing security capabilities in startup or early-stage environments.
3. Deep expertise in cloud security, IAM, encryption/KMS, network security, containers, and Kubernetes.
4. Practical penetration testing and vulnerability assessment experience, with an adversarial security mindset.
5. Strong automation and infrastructure-as-code skills (Python, Go, Terraform).
6. Experience with incident response, operational resilience, and security risk management.
7. Strong technical judgment, ownership, and ability to execute independently in a fast-paced, evolving environment.

Preferred: Experience in exchanges, clearing, trading, fintech, or regulated financial infrastructure. Relevant certifications (OSCP, CISSP, or cloud security certifications) are a plus.
Founding-Hire Opportunity
You will own the security engineering roadmap, influence architecture and technology decisions, establish security standards and priorities, and drive remediation across the organization. As the platform grows, you will help build and develop the security function and team.
Compensation

1. Solid base salary plus meaningful equity, with the opportunity to share in the company's growth and success from an early stage.