DevSecOps Engineer, Capital.com
+ Annual bonuses
3 days a week in office
Trading platform & app
Open for applications
Trading platform & app
501-1000 employees
Open for applications
+ Annual bonuses
3 days a week in office
501-1000 employees
Company mission
To make the world of finance more accessible, engaging and useful.
Role
Who you are
- Proven experience in DevOps, software engineering, or related roles, with a focus on security
- Hands-on experience with cloud platforms (AWS, Azure, GCP), containerisation technologies (Docker, Kubernetes), configuration management (Ansible)
- Proficiency in scripting and automation using languages such as Python or Bash
- Strong understanding of security principles, protocols, and standards (e.g., OWASP Top 10, NIST Cybersecurity Framework, CIS Benchmarks)
- Experience with security testing tools (e.g., Tryvi, Prowler, ScoutSuite, SonarQube, OWASP ZAP, Nessus) and vulnerability management processes
- Excellent communication and collaboration skills, with the ability to work effectively in a cross-functional team environment
- Knowledge of financial industry regulations and compliance requirements is a plus
- Demonstrated ability to adapt to a fast-paced, dynamic environment and drive initiatives independently
- London-based
What the job involves
- We are currently seeking a skilled professional to join our team as a Security Systems Manager
- Designing Secure CI/CD Pipelines: Develop and maintain automated CI/CD pipelines (preferable Gitlab) with a focus on security best practices, including SAST/DAST/SCA, vulnerability assessment
- Infrastructure Security: Implement and maintain infrastructure as code using Terraform / CloudFormation / Ansible, ensuring secure configuration and compliance with industry standards and regulatory requirements
- Security Monitoring and Incident Response: Set up and manage security monitoring tools to detect and respond to security incidents promptly. Develop incident response playbooks and collaborate with relevant teams to address security incidents effectively
- Security Compliance: Ensure compliance with industry regulations (PCI DSS, GDPR, local financial regulation) and internal security policies. Conduct regular security assessments and audits to identify and address compliance gaps
- Security Tooling and Automation:Evaluate, deploy, and manage security tools and technologies to automate security processes and enhance overall security posture. Continuously research and stay updated on emerging threats and security trends
- Secrets Management: Design, implement, and maintain robust secrets management solutions and processes using Hashicorp Vault and AWS SM / KMS
- Collaboration and Knowledge Sharing: Work closely with development, operations, and product teams to embed security into the software development lifecycle. Provide security training and guidance to team members to increase awareness and promote a security-first culture. Maintain comprehensive documentation and playbooks for configuring, operating, and troubleshooting security solutions
- Risk Management: Participate in risk assessments and threat modelling exercises to identify potential security risks and vulnerabilities. Develop and implement risk mitigation strategies to minimise exposure to security threats
Salary benchmarks
Our take
Historically, the wealth-building opportunities afforded by investment have been reserved for those who already have money to spare, but Capital.com is working to change this. The company supplies a trading platform for everyday people to access trading opportunities and training resources, harnessing the power of technology to do so.
Founded in 2016, Capital.com is now a global company, boasting year-on-year growth since it was launched. Its platform gives users access to over 3,700 markets for investing directly in global stocks and ETFs, or trade derivatives across the world. Focused on removing the barriers of entry for trading, the company supplies 24/7 customer service, on top of learning tools such as rolling news feeds, access to a demo account, and a YouTube channel.
Capital.com is one of Europe’s fastest-growing investment-trading platforms and aims to continue its expansion whilst solidifying current operations. With an active and growing user base, that continued to grow despite a downturn in the market in 2022, the company is poised to maintain its successes into the future.
Steph
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
-3% employee growth in 12 months
Company
Funding (1 round)
Jul 2017
$25m
SERIES A
Total funding: $25m
Company benefits
- Private health insurance
- Virtual GP
- Hybrid working
- Option to work abroad (up to 30 days a year)
- Local gym discounts
- Enhanced pension
- Volunteering days
- Hybrid working
- New office in Westminster, London
- Subsidised eye care
- Bereavement support
- Enhanced family leave
- Season ticket loan and cycle to work scheme
Company values
- Care: Building strong relationships is at the core of what we do. We want those who value others
- Be Clear: Whether it’s interacting with clients or colleagues, being able to get your message across clearly is essential
- Be Bold: Making a new product means venturing into the unknown. We need those who can take risks, make assertive decisions, and solve problems
- Explore And Discover: Change requires new ideas, and we want those who enjoy experimenting and learning about new things
- Move Fast: We like to move quickly, and managing time effectively is key to getting work done
- Focus On Outcomes: We focus on the final result, celebrating successes, and learning from failures
Company HQ
Ιστορικό Κέντρο, Λεμεσός, Λεμεσός
Articles
Leadership
Viktor Prokopenya
(Founder)Also founded Currency.com, VP Capital, exp(capital, and Viaden Media, where they were CEO.
Share this job
View 22 more jobs at Capital.com