DevSecOps Engineer

4 weeks ago


London, Greater London, United Kingdom Marex Full time

About Marex


Marex is a diversified global financial services platform, providing essential liquidity, market access, and infrastructure services to clients in the energy, commodities, and financial markets.


Our company provides comprehensive breadth and depth of coverage across four core services: Market Making, Clearing, Hedging, and Investment Solutions and Agency and Execution. It has a leading franchise in many major metals, energy, and agricultural products, executing around 50 million trades and clearing 205 million contracts in the past year.


Marex was established in 2005, but through its subsidiaries, it can trace its roots in the commodity markets back almost 100 years. Headquartered in London with 36 offices worldwide, the company has over 1,800 employees across Europe, Asia, and America.


As a DevSecOps Engineer at Marex, you will play a critical role in integrating security into every phase of our software development lifecycle. You will be responsible for designing, implementing, and managing security automation within DevOps processes, ensuring our infrastructure, code, and applications are secure by design.


Key Responsibilities



  • Implement and manage security testing tools (SAST, DAST, etc.) within CI/CD pipelines to ensure vulnerabilities are detected and addressed early in the development lifecycle.
  • Secure our cloud infrastructure (AWS and Azure), including managing identity and access, network security, encryption, and monitoring for threats.
  • Automate security tasks such as vulnerability scans, compliance checks, and threat detection using scripting (Python and PowerShell) and DevOps tools (Bitbucket Pipelines, GitHub CI/CD, etc).
  • Ensure security in our infrastructure deployments using IaC tools Terraform and Ansible. Conduct security audits on infrastructure code.
  • Secure containerized environments (Docker, Kubernetes) by implementing best practices for image scanning, runtime security, and orchestrator security.
  • Monitor for security threats, analyze incidents, and work with the incident response teams to mitigate risks. Ensure robust logging and monitoring practices are in place.
  • Work closely with developers and operations teams to promote security best practices without disrupting the DevOps workflow.
  • Stay up to date with the latest security threats, vulnerabilities, and tools. Continuously enhance security measures and DevSecOps processes to keep up with the evolving landscape.
  • Carry out R&D to discover opportunities for innovation.
  • Capture, track, and report on usage metrics across the technology estate, to assist in measuring success and decision-making.
  • Arrange knowledge workshops and training.
  • Capture security architecture decisions made along with context and consequences.
  • Follow the change approval process on implementation.
  • Work weekends or outside normal working hours as necessary to avoid business impact when implementing solutions.

Requirements



  • Strong understanding of security principles, vulnerability management, encryption, authentication, and identity management.
  • Ability to work cross-functionally with development, operations, and security teams. Strong communication skills to advocate for security best practices.
  • Strong knowledge of DevOps tools like Bitbucket Pipelines, GitHub Actions, GitLab CI, CircleCI, or similar.
  • Experience with cloud platforms, AWS or Azure.
  • Expertise in containerization and orchestration tools (Docker, Kubernetes) and their security.
  • Proficiency in scripting languages Python or PowerShell for automation.
  • Experience with IaC tools Terraform and Ansible.
  • Familiarity with security tools like SAST, DAST, vulnerability scanners, and SIEM solutions.

Competencies



  • A collaborative team player, approachable, self-efficient, and influences a positive work environment.
  • Demonstrates curiosity.
  • Resilient in a challenging, fast-paced environment.
  • Ability to take a high level of responsibility in a fast-paced and high-volume environment.
  • Excels at building relationships, networking, and influencing others.
  • Strategic collaborator with insight and agility, able to anticipate future challenges, ensuring operational effectiveness.

Marex is fully committed to being an inclusive employer and providing an inclusive and accessible recruitment process for all. We will provide reasonable adjustments to remove any disadvantage to you being considered for this role. We value the differences that a diverse workforce brings to the company. We welcome applications from candidates returning to the workforce. Also, Marex is committed to avoiding circumstances in which the appearance or possibility of conflicts of interest may exist within the hiring process.


If you would like to receive any information in a different way or would like us to do anything differently to help you, please include it in your application.



  • London, Greater London, United Kingdom Aristocrat Tech Europe PL Full time

    Aristocrat Tech Europe P/L is seeking a highly skilled and experienced Principal DevSecOps Engineer to play a critical role in shaping and implementing secure DevOps practices across our organization.Job DescriptionAs a Principal DevSecOps Engineer, you will lead the design, development, and implementation of secure DevOps pipelines, integrating security...


  • London, Greater London, United Kingdom Experis Full time

    Job Description:Job Title: Security Engineering LeadEstimated Salary: £65,000 - £85,000 per annumThe Security Engineering Lead will be responsible for designing and implementing a DevSecOps framework that ensures the security and integrity of our clients' digital products and services. This involves working closely with cross-functional teams to configure...


  • London, Greater London, United Kingdom Marex Full time

    Marex, a leading global financial services platform, offers an exciting opportunity for a DevSecOps Engineer to join our team.About the RoleWe are seeking a skilled professional to play a critical role in integrating security into every phase of our software development lifecycle. As a DevSecOps Engineer, you will be responsible for designing, implementing,...


  • London, Greater London, United Kingdom Paradigm Tech Full time £110,000

    Senior DevSecOps Specialist | Cloud Security EngineerAt Paradigm Tech, we're looking for a talented Senior DevSecOps Specialist to join our Cyber-Security function. This role is a great opportunity for someone who wants to make a positive impact in the Renewable/Sustainability sector.The ideal candidate will have a strong background in DevSecOps and Security...


  • London, Greater London, United Kingdom Damia Group LTD Full time

    Job Description Company Overview:Damia Group LTD is a leading Defence SME seeking an experienced SC Cleared DevSecOps Engineer to join their team. SalaryThe estimated salary for this position is £60,000 - £80,000 per annum, commensurate with experience. Job Description:This role involves providing comprehensive support for the implementation of DevSecOps...

  • DevSecOps Engineer

    3 weeks ago


    London, Greater London, United Kingdom iO Associates - UKEU Full time £60

    Job Title: DevSecOps Engineer - Cybersecurity SpecialistAbout the Role:We are seeking a highly skilled DevSecOps Engineer to join our team at iO Associates - UK/EU. As a DevSecOps Engineer, you will play a critical role in supporting our client, a German electricity company, in maintaining and developing their electricity infrastructure.Key...


  • London, Greater London, United Kingdom Locke & Mccloud Full time

    Job Title: DevSecOps Team ManagerAbout Us: Locke & Mccloud is a forward-thinking technology company that values innovation and creativity. We're seeking a skilled DevSecOps Team Manager to lead our security engineering efforts.Job Description: As a DevSecOps Team Manager, you will be responsible for overseeing the security engineering team and ensuring the...

  • DevSecOps Engineer

    1 month ago


    London, Greater London, United Kingdom Develop Group Ltd Full time

    We are seeking a skilled DevSecOps Engineer to join our team at Develop Group Ltd. The ideal candidate will have experience with Microsoft 365, Sentinel, Defender, Azure, and Enterprise Security Policies.The successful candidate will be responsible for implementing automation tooling and best practices, as well as understanding architectural designs at an...


  • London, Greater London, United Kingdom Placeholder VC Full time

    Full-time opportunity available for a skilled DevSecOps engineer to join our team in Berlin, London, or Lisbon. We offer a competitive salary of approximately €110,000 per annum.About ParityParity is a pioneering blockchain infrastructure company that has built and developed some of the most advanced technologies in the sector. As a leading player in the...


  • London, Greater London, United Kingdom Oho Group Ltd Full time

    Job TitleTraining EngineerAbout the RoleWe are seeking a Lead DevSecOps Engineer to join our fast-growing business. The ideal candidate will have full ownership of security and infrastructure, with GCP experience being a plus but not required.ResponsibilitiesTake ownership of security and infrastructure, ensuring they align with industry best practices and...


  • London, Greater London, United Kingdom Client Server Full time

    Senior DevSecOps Engineer - AWSWe are looking for a Senior DevSecOps Engineer - AWS to join our team at Client Server. As a key member of our team, you will focus on securing our AWS infrastructure and implementing robust DevOps practices across environments.About the RoleThis role involves designing, implementing, and maintaining secure cloud architectures...


  • London, Greater London, United Kingdom Harness Full time

    Harness is a high-growth company that revolutionizes the software delivery market by empowering 30 million software developers to deliver code reliably, efficiently, and securely. Our mission is to increase customers' pace of innovation while improving the developer experience.About the Role:Collaborate with internal and external stakeholders to design and...


  • London, Greater London, United Kingdom Iceberg Full time

    Are you a seasoned DevSecOps/SecOps Engineer looking to transition into a more Pen Test-focused role? Do you have Pen Test certifications or a strong interest in this field? Look no further! Iceberg is seeking an experienced professional to join our team as a Cloud Security Architect.Our client is dedicated to finding the best talent, and we're offering a...

  • DevSecOps Engineer

    4 weeks ago


    London, Greater London, United Kingdom Dabster Full time

    Job Title: DevSecOps Engineer - Cloud Security SpecialistWe are seeking a skilled and experienced DevSecOps Engineer with a strong specialization in Google Cloud Platform (GCP) to contribute to the security and integrity of our software development processes on GCP. Your expertise in GCP, Rego policies, and Terraform will be instrumental in building a secure...


  • London, Greater London, United Kingdom Harness Inc Full time

    Harness Inc, a pioneering software delivery company, is seeking an experienced Senior DevSecOps Solutions Architect to join its engineering team. The ideal candidate will have 5+ years of experience in DevOps and multiple solutions, including CI/CD and Policy Governance.About the RoleEngage with customers' technical teams to analyze and understand current...

  • DevSecOps Engineer

    1 month ago


    London, Greater London, United Kingdom Globant Full time

    We are seeking a DevSecOps Engineer to leverage cutting-edge technologies in maintaining and securing our infrastructure. Our ideal candidate will have expertise in AWS with Kubernetes for deploying microservices architecture, ensuring robust security posture and compliance frameworks.Key Responsibilities:Configure Prisma Cloud from Palo Alto for enhanced...

  • DevSecOps Specialist

    3 weeks ago


    London, Greater London, United Kingdom Dabster Full time

    Job Overview:Dabster is seeking a seasoned DevSecOps Specialist to spearhead the security and integrity of our software development processes on Google Cloud Platform (GCP). As a key member of our dynamic team, you will leverage your expertise in GCP, Rego policies, and Terraform to build a secure and efficient development pipeline.Key...


  • London, Greater London, United Kingdom Borderless Capital Full time

    **About the Role:**We're excited to announce a fantastic opportunity for a Cloud Native DevSecOps Engineer to join our team at Borderless Capital. As a key member of our team, you'll play a critical role in helping us secure our networks, operating systems, containers, pipelines, and code.Your primary responsibilities will include advising Infra Engineering...


  • London, Greater London, United Kingdom FD Technologies Full time

    About FD TechnologiesWe are a leading provider of high-performance analytics solutions, empowering our customers to transform into data-driven enterprises. Our mission is to accelerate innovation with cutting-edge technology, enabling our customers to make informed decisions and drive growth.At the heart of our products are time series and vector data...


  • London, Greater London, United Kingdom Withintelligence Full time

    About the RoleWe are seeking a highly skilled Senior DevSecOps Engineer - AWS to join our team and take ownership of our AWS security operations.The ideal candidate will have hands-on experience with systems automation and deployment tools, as well as proficiency in security tools and technologies such as AWS Security Hub, GuardDuty, and IAM.Key...