Cloud Security Engineer

Job Description

Who we are:

At TrueLayer, we’re building a global open banking platform that’s changing how money moves and so much more. We make payments and refunds instant, account data accessible and verification seamless — all so innovators in every industry can build better financial experiences for their users.

To date, we’ve raised $270 million from world-renowned investors including Stripe, Tiger Global, Addition and Tencent. We’ve got offices in London, Milan, Dublin and Sydney. And we’re trusted by industry leaders like Revolut, Cazoo and Trading 212… though we’re not stopping here.

Our vision is a financial system that works for everyone. To make that happen, we’re creating original and innovative products that will remove the friction from finance for good. We’re seriously scaling our infrastructure, we’re entering new areas all the time, we’re cornering a whole new category — and we’d like your support to get us there.

At TrueLayer, security is at the foundation of our product. By championing the best security practices across the business, our Security Engineers empower both their colleagues and our clients, and ensure the availability, stability and security of our API platforms.

We’re looking for Cloud Security Engineer to join our growing team to shape and mature our infrastructure security. You will work within our security team and work closely with our cloud infrastructure team to build scalable cloud native security services, to ensure our expanding AWS and Kubernetes platforms are kept secure.

We aim to empower our engineers with best-in-class technologies and the opportunity to have meaningful impact. As part of an ambitious team you’ll be given hands on exposure to the latest technologies (AWS, Kubernetes, Terraform and Vault amongst others) and practices and entrusted with crucial responsibilities and decisions, playing a key part in securing our products as we scale.

What you will do:

• Provide security expertise and guidance on our cloud infrastructure;
• Work with our engineering teams to design, build and maintain security services, hardening the security of our platform;
• Build, improve and drive security monitoring and security automation across our infrastructure as we scale;
• Pro-actively identify security weaknesses within our systems;
• Help manage the day to day operations of our security services

We’re looking for people who

• Demonstrate good knowledge of AWS services and security tools and services;
• Hands on experience with infrastructure as code, specifically Terraform;
• Have experience programming in either Python, Go or Rust ;
• Can show a good understanding of the common vulnerabilities affecting modern environments;
• Have an automation first approach to security, from development to operation;
• Are able to collaborate effectively with colleagues in other engineering teams
• Can come up with innovative ideas and solutions to common problems

Nice to have:

• A blog, GitHub account and/or bug bounty findings that demonstrate your experience.
• Understanding of Kubernetes architecture and administration
• HashiCorp Vault experience
• Understanding of applied cryptography concepts

What you can expect from us:

• Competitive salary and meaningful equity in the company
• Flexible hours and hybrid working — work from home and our incredible offices in London Milan Sydney and Dublin
• A remote-working budget to help set up your home office
• Flexible holiday policy, with 24 days as standard
• Generous parental leave, above and beyond statutory requirements and with no minimum tenure
• Enhanced pension contribution at 4% & 4%
• Private Health Insurance from the day you start
• 12 fully-paid Wellbeing Days a year (on top of the holiday allowance)
• Membership of mental wellbeing platform Spill
• £1,000 to spend on learning & development each year

At TrueLayer, we don’t just do inclusion and diversity. We embrace people that have different opinions, perspectives and personalities. Because we believe that by seeing the world from all sorts of angles, we can make life better for all the people who live in it. So we want you to know that the things that make you, you — like your age, ability, background and identity — are things that we celebrate and support. All we ask is that you believe in what you do (And know what an API is).