Senior Security Engineering Manager

Description

The company helps ambitious businesses operate and scale globally through business accounts, hedging and financing on one platform with a smooth workflow.

Founded in 2009, it is a fast-growing fintech leader that builds a proprietary platform for managing global cash flow and keeps evolving its product.

The posting says the company has 2000+ staff across nearly 70 cities and is always hiring.

The team is looking for collaborators who want to change how businesses work worldwide and grow their careers in the process.

Applications are assessed by people, though the company uses automated tools for administrative tasks in recruitment.

Responsibilities

• Lead and grow a global team of security engineers, mentoring them and setting clear career paths.
• Define and build high-level security architecture for existing systems and new projects.
• Work with software engineering and platform leaders to put security requirements into roadmaps and sprints.
• Stay hands-on: run architecture design reviews, review critical code, and make the final call on hard security trade-offs.
• Report measurable, data-backed security posture metrics to executives.
• Define and scale the secure software development lifecycle, adding automated SAST, DAST and SCA testing to CI/CD pipelines.
• Make threat modelling a continuous practice across product teams.
• Design and evolve guardrails and secure frameworks for agentic development and AI-assisted workflows.
• Own the end-to-end vulnerability management programme: continuous discovery, context-aware triage, remediation SLAs and board-level risk reporting.
• Work with engineering managers to fix systemic and critical vulnerabilities, clear blockers and escalate when timelines slip.
• Direct AI-assisted tooling, including continuous scanning pipelines and internal automated red-teaming platforms.
• Direct identity and access management architecture across multi-cloud infrastructure and customer-facing microservices.
• Make sure authentication, authorisation, least privilege and Privileged Access Management controls meet compliance and internal audit standards.
• Work with platform engineering to set security guardrails on AWS and GCP, covering network segmentation, perimeter defence and container runtime security.
• Review and approve high-risk architecture changes across platform and cloud network boundaries.
• Support technical external audits and close gaps against ISO 27001, SOC 2 and DORA through engineering work rather than paperwork.

Requirements

• 8+ years of experience across software, platform or security engineering, including 3+ years managing engineering teams.
• A background as a software engineer or technical security specialist who moved into management and kept deep technical skills.
• A record of designing, building and running security controls at scale on AWS and/or GCP and on Kubernetes.
• Hands-on skill in secure coding, DevSecOps integration, threat modelling and federated identity protocols (OAuth2, OIDC, SAML).
• Ability to turn high-level business risk into prioritised, actionable engineering backlogs.
• Experience delivering multi-quarter technical initiatives from start to measurable finish.
• A data-driven approach, and confidence defending technical positions to executives and engineers.
• A pragmatic mindset that balances strong security controls with engineering speed.
• Experience in regulated financial services, fintech or payment processing.
• Working knowledge of NIST CSF, ISO 27001 and CIS benchmarks.
• Excellent written and verbal English, with the ability to explain nuanced risk to cross-functional teams.
• Experience leading remote or distributed teams across several geographies.
• Desired: experience running or migrating workloads across both AWS and GCP.
• Desired: hands-on experience with LLM or AI security models, or agentic automation in software engineering.
• Desired: certifications such as CISSP, CISM, OSCP or a hyperscaler security specialty.

Conditions

The company is headquartered in London and is majority owned (54%) by Banco Santander.

It is recognised in the Financial Times list of Europe's Fastest-Growing Companies and employs over 1,700 people across 40+ offices in 25+ countries.

You report to the Engineering Director, Platform & Security.

The role leads a distributed team of security engineers covering cloud security, penetration testing and software development.

Your remit covers vulnerability management, AI threat modelling, SSDLC, agentic SDLC workflows, disaster recovery planning and cloud infrastructure hardening.

The team focuses on engineering problems only, not GRC, policy writing, endpoint antivirus or SecOps and incident response.

The company is investing heavily in product and platform security across its global financial services operations.

The company welcomes applicants of every background and is committed to inclusion and equal opportunity.