Senior Cloud Security Engineer, Form3
Payment technology platform
Job no longer available
Payment technology platform
201-500 employees
Job no longer available
201-500 employees
Company mission
To become the world's most trusted provider of payment technology.
Role
Who you are
- Experience in securing SDLCs, conducting SAST and DAST testing, threat modelling, code analysis and incident management. Our engineering teams are constantly developing new products that are added to our singular API gateway so the CI/CD pipeline must be secure by design
- Ability to create, deliver and enhance security of cloud-native distributed systems (we use AWS and GCP at present with Terraform as our Iac tool), following the best practices and implementing security controls post assessment. We are also looking to become cloud-agnostic meaning there will be opportunity for you to showcase your abilities across other cloud platforms
- Strong programming skills, we are flexible on languages, we use Go as our main language for production so a willingness or interest to learn Go is fundamental. In security we write our own scripts for automation in Python, Go and other languages while contributing to open-source tools so we can utilise them
- Familiarity with containerisation and microservices architecture security concepts is also crucial to being successful in this role
- Willingness to be part of the on-call rota
- 3+ Years of expertise in Kubernetes, securing clusters and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus)
- Experience in hardening Linux OSs
- +3 Years of container security knowledge including container image provenance (Sigstore and Notary as examples) with an in-depth knowledge of container runtimes/ Docker and the security controls and best practice that surround microservice architectures
- Involvement in DevSecOps operations within Agile environments on to CI/CD pipelines (Travis CI and Flux are our tools) with the ability to choose the right tool to fit purpose
- Hands on work within agile DevOps environments that follow the DevSecOps best practices, where you expressed the ability to choose the right tool to fit purpose
- CI/CD pipeline (Travis CI and Flux are our tools) security management
- Wider Security:
- Hands on experience taking your company through any of the following ISO27001, ISAE3000, SOC2/1, GDPR, PCI-DSS
- Previous experience in developing security road maps and architectures alongside Security Architects in cloud-native or hybrid-infrastructures including network security (AWS solutions architect or GCP professional cloud architect are a plus)
- Previous experience in network security, preferably in hybrid infrastructure based environments, you will have managed, switches, network segmentation, ports and firewalls across the entire OSI model
- Personal Interests:
- Keen interest in new and emerging threats, vulnerabilities and adversary advancements coupled with the ability to present these to the wider team
- Active contributor to open-source projects and passion for developing internal tools (our engineers were some of the main contributors for TFSec)
- Additional Qualifications (nice to have but not necessary): OSCP, CASE, CCSP, AWS Security Specialist or GCP Professional Cloud Security Engineer
What the job involves
- Creating a Secure Software Development Lifecycle (SSDLC)
- Securing our cloud-native (AWS, GCP and Azure) distributed system architecture
- Creating security tools and implementing them to enhance our specific security landscape
- Advocating the DevSecOps mindset that we have created across our engineering teams
Our take
Form3 provides a complete end-to-end Payments-as-a-Service for financial institutions and regulated fintechs. It allows businesses to offer direct payment services via a simple interface, modernising their payment technology to make it more reliable and secure.
People expect their user experience with financial transactions to be fast and secure. Modern businesses require money to be transmitted instantly, securely, and with the promise of being available worldwide in real time. Form3 has capitalised on this modern demand, offering a comprehensive but straightforward service which gives customers greater control of their payments.
The company's partnerships have been a strong part of its growth strategy, with its technology used by major enterprise including GOldman Sachs, Nationwide and Clarency. Recently, Nationwide Building Society has made a further strategic investment in Form3, alongside a debt facility from BlackRock, supporting the company's path to profitability and continued US expansion.
Form3 has also delivered some new solutions, such as Verification of Payee for European payments provider Mollie, helping clients meet evolving regulatory requirements while strengthening fraud prevention and operational resilience. Backed by leading financial institutions and reporting record performance in 2025, Form3 is sharpening its focus on scaling its cloud-native payments platform across the US and Europe.
Freddie
Company Specialist at Welcome to the Jungle
Insights
17% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Sep 2024
$60m
SERIES C
Sep 2021
$160m
SERIES C
Total funding: $277.3m
Company benefits
- Flexible working aragmeents
- 30 days annual leave
- Home office equipment allowance
- Learning & Development
- Long term incentive plans
- Mental health support
- Primary caregiver leave
Company HQ
City of London, London, UK
Leadership
Mike Walters
(Co-Founder & CEO)Mike initially served as the company's CPO after co-founding it in 2016, moving into the role of CEO in 2023. Previously, he was a Product Director of Global Payment Acceptance at Barclaycard. Before that, he spent 10 years at Barclays in various Director roles and as Head of Corproate Payuments.
David Scola
(CPO & US Chief Executive)Prior to joining Form3 in 2022, David was the Head of North America/Chief Executive of America, UK and Ireland at SWIFT. He also spent nearly 7 years at Barclays as a Managing Director, Global head of Bank Coverage (Corp Banking) and Global Head of Financial Institutions (Barclays Corporate) and 7 years at Deutsche Bank as a Managing Director.
Benyam Hagos
(CFO)Prior to joining Form3 in 2023, Benyam was a VP, European Finance Director and COO of Europe and Middle East at Nium. He also served as the CFO at Ixaris and as a Director, UK Controller at Mastercard.
Mark Fieldhouse
(CRO)Prior to joining Form3 in 2025, Mark was a Strategic Advisor at GAINZ.AI and Future Resilience forum. He was also the VP and GM, Americas and EMEA at Rescale and GM, EMEA at NS1.
Share this job
View 4 more jobs at Form3