Infrastructure Security Engineer

Overview

In this role, you will design and implement security controls across product, platform, and infrastructure to protect our global crypto services. You’ll work with SRE and engineering teams to embed security into CI/CD and cloud-native architectures, building automated tooling to enforce secure configurations and detect gaps. You’ll lead threat modeling, incident response support, and security guidance to drive continuous improvement. This is an opportunity to shape security across consumer-facing and institutional offerings in a fast-growing, mission-driven company.

Pay / Benefits

• equity in a rapid-growth company
• London-based role with in-office four days a week
• remote work up to 20 days per year
• Apple equipment
• flexible work culture
• unlimited vacation policy

Responsibilities

• Design, build, and implement security controls, automation, and processes across product, platform, and infrastructure environments
• Identify operational and technical security gaps, propose solutions, and drive engineering initiatives to close them
• Collaborate with SRE and engineering teams to integrate security into CI/CD pipelines, deployment workflows, and cloud-native architectures
• Build automated tooling and services to enforce secure configurations, detect misconfigurations, and support continuous compliance
• Assist in threat modeling, design reviews, and architectural assessments for new and existing systems
• Contribute to internal security documentation, best practices, and developer guidance
• Participate in security incident response when engineering expertise or automation support is needed

Key requirements

• 4+ years of experience in security engineering, platform security, or DevSecOps roles
• Hands-on experience implementing security controls and automation within cloud environments, GCP or AWS preferred
• Proficiency in scripting, automation and infrastructure as code (e.g., Python, Bash, Go, Terraform)
• Ability to collaborate with engineering teams and translate security requirements into practical solutions
• Strong analytical and problem-solving skills with a bias toward automation
• Curiosity, ownership, and a drive to continuously improve security posture
• Familiarity with Cloudflare, OSS SIEM tools (Splunk, Elastic), incident management platforms (e.g., Incident.io, PagerDuty)
• Familiarity with at least one CI/CD system (GitHub Actions, Concourse, CircleCI)
• Familiarity with maintaining HIDS systems (Wazuh)

• collaboration with cross-functional teams
• analytical and problem-solving mindset
• ownership and proactive improvement
• GCP or AWS cloud security
• Python, Bash, Go, Terraform
• CI/CD tooling (GitHub Actions, Concourse, CircleCI)

…