20 hours ago
London, United KingdomSenior
Responsibilities
- Select, integrate, and maintain security tooling across Yapily’s environments and CI/CD pipelines.
- Design, implement, and enforce automated security guardrails and policies across the cloud estate and deployment pipelines.
- Harden and secure the Google Cloud Platform environment, including IAM policies, network security, and resource configuration management.
- Translate compliance and governance requirements into automated, verifiable infrastructure and deployment practices.
- Automate and manage vulnerability identification, triage, patching, and remediation across infrastructure, applications, and third-party dependencies.
- Build and maintain secure “golden path” service-deployment templates for feature teams.
- Contribute expertise to security incident response and help resolve security events.
Requirements
- Deep practical experience designing, managing, and securing highly available infrastructure in GCP.
- Proficiency in reviewing API security and helping engineers implement secure API interfaces.
- Expertise deploying, operating, and hardening Kubernetes/GKE clusters, including network policies, container runtime security, and secrets management.
- Strong skills writing, securing, and testing infrastructure-as-code configuration with Terraform or OpenTofu.
- Hands-on experience deploying and managing security tools such as Aqua Security, Falco, Prisma Cloud, or similar CSPM, CWPP, or CNAPP solutions.
- Proficiency in Python, Golang, or Shell for security automation and workflow tooling.
- Experience building secure and repeatable CI/CD pipelines with integrated security checks, such as GitLab CI or GitHub Actions.
- Experience with regulated financial-services certifications, standards, or frameworks such as SOC2, ISO 27001, PCI DSS, or DORA is desirable.
- Relevant certifications such as Google Cloud Professional Security Engineer, CKS, or CISSP are desirable.
Benefits
- Hybrid working with the option to work from home up to three days per week, subject to eligibility criteria.
- Up to 20 days of nomad working anywhere each year.
- 25 days of annual holiday in the UK plus bank holidays, with additional days earned after the first year up to five more days.
- Enhanced maternity and paternity leave.
- Private medical insurance through BUPA.
- Mental health and personalised wellness support.
- Company pension, life assurance, and income protection.
- £200 annual learning and personal-development budget.
- Cycle to Work Scheme.
- £1,000 employee referral reward.
- Monthly socials, team lunches, social budget, office snacks, and a dog-friendly office.
Tech Stack
Categories
About Yapily
Yapily builds an open banking API platform that connects businesses to banks to access account data and initiate payments; customers include fintechs, payment providers, and enterprises. Privately held and founded in 2017, the London-headquartered company provides connectivity to thousands of banks across Europe, selling its developer-first APIs to businesses via commercial agreements.