In this pivotal role, you will take part in designing, leading planning, and implementing robust security strategies across our cloud infrastructure. Youll be at the forefront of integrating security into every stage of our development and deployment processes – working closely with development teams, security teams and DevOps team, ensuring our systems are secure, scalable, compatible, and aligned with best practices.
This is a unique opportunity to shape the security architecture of a fast-moving, innovative company, and to work closely with engineering, IT, and security teams to drive a culture of security-first development.
Responsibilities:
Craft and implement cutting-edge cloud security controls and technologies.
Lead design, implementation, and integration of various cloud security tools.
Identify new technologies and security tools and lead operationalization solutions from POC to Production.
Help build infrastructure, tools, and services to improve delivery and availability.
Work closely with DevOps, Engineering and product teams to define security strategy and controls and execute on it.
Collaborate with R&D teams on designing and the implementation of new features.
Stakeholder Collaboration:
Act as the main point of contact between DevOps and external/internal stakeholders: Banks, Regulators, Security teams, NOC/SOC, and Development teams.
Communicate clearly on priorities, incidents, risks, timelines, and platform status.
Represent DevOps in cross-functional planning and reviews.
Process & Standards:
Define and evolve the DevOps teams SDLC, deployment standards, and incident response processes.
Drive best practices in monitoring, alerting, and reliability engineering.
Champion a culture of ownership, transparency, and continuous improvement.
7+ years of Cloud Security or DevOps – including at least 3 years in a DevSecOps role.
Proven experience managing multi-region AWS production environments, with at least 3 years of hands-on experience in AWS, including high-availability systems, disaster recovery, and compliance-driven environments.
Proven track record designing and securing complex cloud infrastructures
Deep knowledge of security controls, cloud best practices.
Hands-on experience with leading security tools (e.g., KMS, GuardDuty, CloudTrail, CSPM, DSPM).
Skilled in security monitoring, incident response, and risk mitigation.
Strong skills in Terraform, Kubernetes, CI/CD (e.g., GitHub Actions), observability tools (e.g., Datadog, Prometheus, OTLP).
Solid understanding of internet protocols, architectures, and security design principles.
Familiarity with compliance frameworks (SOC2, ISO27001, PCI) and evidence gathering (advantage).
Self-motivated, proactive, excellent communication and stakeholder management skills. Experience working with Security teams / client CISO office.
Ability to balance short-term firefighting with long-term vision.
Security certifications (e.g., CISSP, CKS, CEH, CISA, CISM, Security+) – advantage.
Experience in the FinTech or regulated financial sector – advantage.
