Platform Security Engineer London

Bondsmith Savings Ltd.
London
2 weeks ago
Applications closed

Related Jobs

View all jobs

Senior Cloud & Applications Security Engineer (London Area)

Windows Security Engineer : London Hedge Fund : £100k : Hybrid

Senior Cyber Security Engineer (London Area)

Senior Cloud & Applications Security Engineer

Security Analyst

Senior Product Security Engineer (VP-level) (London)

Bondsmith is a fast growing platform focused on helping customers make the most of their savings by offering access to a wide range of deposit products.

We work with financial institutions like wealth managers, fintechs, banks, and advisors, providing them with tools to get better returns on cash, engage more effectively with clients, and simplify their operations. Our goal is to help savers get the most out of their cash.

At Bondsmith, our core values are rapid and continuous improvement, delivering good customer outcomes, and taking end to end ownership. Our team is made up of experienced professionals who are passionate about delivering excellent service and finding new ways to solve challenges in financial services. Joining us means working in a fast-paced environment where you will be making an impact on the financial lives of thousands of savers.

We’re regulated by the Financial Conduct Authority in the UK.

We are looking for a skilled and proactive DevSecOps Engineer to take ownership of our security frameworks, testing, and hands-on implementation of secure systems. You will join our Engineering team to play a pivotal role in integrating security practices into the development lifecycle, ensuring that our software development processes are secure by design.

You will work closely with Development and Platform teams to embed robust security practices across the software development lifecycle (SDLC). This is a hands-on role that requires expertise in security testing, framework design, and automation, as well as a commitment to building a secure, scalable infrastructure.

This is a hybrid role - you will be required to work from the London office at least 3 days a week.

Key Responsibilities:

  • Develop, implement, and maintain CI/CD pipelines using GitHub Actions. Automate testing and deployment processes to ensure high-quality releases.
  • Implement and manage security controls across cloud infrastructure to protect data and applications.
  • Regularly assess the security posture of applications and infrastructure, identifying and mitigating vulnerabilities.
  • Continuously improve security using automated scanning and monitoring tools.
  • Create and maintain security policies, standards, and guidelines to ensure compliance and best practices across the organisation.
  • Ensure that systems and processes comply with relevant regulatory requirements and industry standards.
  • Establish and maintain monitoring systems for detecting threats and anomalies. Provide actionable insights to mitigate risks.
  • Ensure that all stages of the development and deployment process are secure, from code commit to production release.
  • Develop scripts and utilise automation tools to streamline security tasks and ensure consistent application of security measures.
  • Collaborate with the teams to promote DevSecOps and security practices.
  • Keep abreast of emerging threats, vulnerabilities, and technologies to ensure the organisation remains protected.

Requirements:

  • Experience with DevSecOps/Security tooling for CI/CD (Jenkins, GitHub Actions, ArgoCD).
  • Proficient with IaC tools (Terraform, CloudFormation).
  • Experience in securing cloud platforms (AWS/Azure/GCP) and containerisation technologies (Docker, Kubernetes) with a focus on security.
  • Proficiency in Bash/Python.
  • Experience with microservice architecture and monitoring tools (ELK, Datadog).
  • Understanding of secure coding practices, application security principles, and compliance frameworks.
  • Hands-on experience in security tools (e.g., SAST, DAST, vulnerability scanners, OWASP ZAP, SonarQube, Snyk, Elastic Security, tfsec, AWS Inspector or Trivy).
  • Experience in SIEM systems and threat detection.
  • Financial services experience, especially in secure, resilient cloud platforms in regulated environments.
  • Excellent communication and problem-solving skills.

Education and Certifications:

  • Proven experience in DevSecOps, and/or security related role.
  • Bachelor's degree in Computer Science, Information Security, or a related field.
  • Strong understanding of security principles and practices.
  • (Desirable) AWS/Azure/GCP Security certifications, Certified Kubernetes Security Specialist (CKS), Certified Information Systems Security Professional (CISSP).
  • (Desirable) Understanding of regulatory compliance requirements, for example, ISO 27001, GDPR, and other relevant regulatory standards.

About You:We’re looking for someone who is:

  • Confident & Motivated:You take initiative and are eager to tackle new challenges.
  • Independent:You’re comfortable working on tasks autonomously but enjoy collaborating with a team.
  • Quick to Learn:You’re excited to dive into new technologies and constantly improve your skills.
  • Team-Oriented:You value working with a high-performance team and contributing to a positive culture.
  • Dedicated & Resourceful:You bring a strong work ethic and a solutions-oriented mindset.
  • Customer-Focused:You’re driven by the chance to create solutions that make a difference for our customers.

What makes Bondsmith unique:

  • Early-stage startup:You will join an early-stage startup with less than 50 members. This means you’ll have an opportunity to make a real impact and shape the future of Bondsmith.
  • Customer demand:Unlike other startups who are still finding their way and pivoting on products, we have strong demand from our enterprise clients for our products, we just need to keep building them.
  • Next fintech growth story:We are doubling in headcount year on year and hiring across a range of positions.

Company Benefits:

  • Competitive salary.
  • Share scheme participation.
  • All the right equipment to make sure you’re working at your best.
  • Fun and social office in Shoreditch.
  • Deliveroo for working late in the office.

Apply for this job:

* indicates a required field

First Name *

Last Name *

Email *

Phone

Resume/CV *

Accepted file types: pdf, doc, docx, txt, rtf

#J-18808-Ljbffr

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Quantum-Enhanced AI in Cyber Security: Guarding the Digital Frontier

The cyber security landscape has evolved dramatically over the past decade. Long gone are the days when businesses primarily worried about simplistic phishing or basic website defacements. Today’s threats include nation-state attacks, sophisticated ransomware, AI-generated phishing campaigns, and a wide array of stealthy intrusion methods. Organisations must defend vast digital ecosystems that include cloud infrastructure, IoT devices, and critical operational technology—any of which can become high-value targets for malicious actors. Amid these escalating challenges, a new technological wave is emerging: quantum computing. Although still in its infancy, quantum computing promises capabilities that could surpass even the most advanced classical supercomputers for specific tasks. Simultaneously, in the world of Artificial Intelligence (AI)—where data volumes and model complexity are exploding—quantum’s parallelism could significantly boost analysis, training, and decision-making. What unfolds when quantum computing and AI converge in the realm of cyber security? On one hand, quantum technologies could introduce stronger encryption and faster threat detection. On the other, adversaries armed with quantum power might break today’s cryptographic protocols or develop more potent attacks at unimaginable speeds. This article explores the phenomenon of quantum-enhanced AI for cyber security: the possibilities it unlocks, the challenges it poses, and the reasons it could reshape both defensive and offensive operations in the digital world.

Cyber Security Jobs at Newly Funded UK Start-ups: Q3 2025 Investment Tracker

Cyber security is no longer just a topic for tech-savvy professionals—it’s an essential pillar of every modern organisation. From protecting sensitive customer data to thwarting state-sponsored attacks, cyber security teams play a crucial role in safeguarding digital infrastructures across all sectors. In the UK, cyber security innovation is thriving, fuelled by a fertile mix of venture capital, government backing, and an ever-growing pool of talented specialists. Now, in the third quarter of 2025, we’ve seen a fresh influx of funding for cyber security start-ups that are poised to shape the industry’s future. This Q3 2025 Investment Tracker highlights newly funded UK-based cyber security start-ups, their core offerings, and—most importantly—the wide range of job opportunities they’re creating. Whether you’re a veteran security analyst, a pen tester, or a newcomer eager to explore the defensive side of tech, these start-ups are actively seeking professionals to help drive their next phase of growth. We’ll also guide you through the essential skills in demand, strategies to secure a role, and how to leverage CyberSecurityJobs.tech to fast-track your job search.

Portfolio Projects That Get You Hired for Cyber Security Jobs (With Real GitHub Examples)

With rising cyber threats and increasingly sophisticated attacks, cyber security has become a critical priority for organisations worldwide. From penetration testers (pentesters) and SOC analysts to cloud security engineers and threat intelligence specialists, the demand for skilled cyber security professionals continues to surge. But how do you stand out in a growing field? Alongside your CV, an impressive cyber security portfolio can be the distinguishing factor that convinces employers you’re the right fit. In this comprehensive guide, you’ll discover: Why a cyber security portfolio is essential for job seekers in this domain. How to align portfolio projects with different cyber security career paths. Real GitHub examples that demonstrate best practices in security-focused projects. Actionable project ideas you can start today, from penetration testing labs to blue-team detection pipelines. Best practices for organising your repos and presenting your work so hiring managers can instantly see your impact. When you’re ready to pursue your next opportunity, remember to upload your CV on CyberSecurityJobs.tech. Our specialised platform connects talented security professionals with employers who need your expertise—exactly what your portfolio will showcase.