# Lead Security Engineer (DevSecOps & CISO)

[Smarkets](https://gurify.com/jobs?q=Smarkets) · London · Posted 2 weeks ago

Lead

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://jobs.ashbyhq.com/smarkets/1d8143b9-96fb-4a75-9f17-0642f7056cb5)

## Job description

### Lead Security Engineer (DevSecOps & CISO)

### ABOUT SMARKETS

Smarkets is a prediction market exchange for sports and political trading, having handled over $50 billion in volume since 2010. We're upending sports betting with the fairest prices, the best technology, and a superior customer experience — powered by attracting great people and building a high-performance environment where they thrive. We're looking for an atypical candidate with strong regulated-business experience to support our growing CFTC business.

### THE ROLE

This is our inaugural security hire, working alongside Infrastructure to protect the distributed, real-time systems behind our trading engine. You'll lead our information security programme across our core products and our DCM/DCO entities — a founding build, standing up security engineering from the ground up through go-live and maturing it as we scale. Reporting directly to senior leadership and the Board, you'll own security posture updates and ensure our risk management and incident response frameworks exceed regulatory and operational standards.

### ABOUT YOU

- Security expert with hands-on experience building security engineering/DevSecOps capabilities in a cloud-native, high-growth environment — ideally financial services or exchange infrastructure

- Excellent communication skills for executive, board, and regulatory audiences

- Familiarity with CFTC system safeguards expectations, including 17 C.F.R. § 38.1051 and § 39.18 or similar regulatory requirements

- Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices

- Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI) and security tools (Snyk, Aqua, Trivy, Checkov, Twistlock, Clair)

- Hands-on expertise securing AWS/Azure/GCP, Kubernetes, containers, and IaC

- Proficiency in Python, Bash, Go, or similar

### RESPONSIBILITIES

- First dedicated security engineering hire, working from within Infrastructure and Engineering teams to establish and evolve Smarkets' security capabilities

- Own regulatory/industry engagement (including CFTC), reflecting external expectations in internal practice

- Define a pragmatic, risk-based security strategy across cloud infrastructure, applications, trading systems, and corporate environment

- Lead or support the investigation, containment and remediation of security incidents, including post-incident root cause analysis and corrective actions.

- Work with Engineering teams to build security into the SDLC — SAST, DAST, SCA, container/IaC scanning in CI/CD — without becoming a delivery bottleneck

- Implement controls across AWS, Kubernetes, containers, and IaC, hardening identity, secrets, and network access

- Establish security monitoring and detection across applications, APIs, and infrastructure

- Develop and maintain security policies, standards, and controls meeting DCM/DCO requirements

- Maintain evidence and documentation to support regulatory examinations and audits

- Act as a security partner to engineers, building a culture of ownership over security

### DESIRABLE

- Personal interest in sports, exchanges, or trading

- Certifications: DSOP, CKS, CISSP, CCSP, CSSLP, or AWS/Azure/GCP Security Specialty

- Track record of security automation at scale in Agile/Scrum

- Direct experience with regulators/examiners on technology and system safeguards

- Familiarity with event contracts, prediction markets, or similar novel futures products under CFTC

### OUR VALUES

Our values are at the heart of everything we do - guiding how we work, collaborate, and innovate. They reflect what we expect of ourselves and each other to deliver the best results, while fostering a positive, high-performing environment:

- Push to Win: We set ambitious goals and relentlessly pursue them, always striving for excellence.

- Make Others Better: We lift each other up, share knowledge, and celebrate team success over individual achievement.

- Give a Shit: We care deeply about our work, our users, and the impact we make.

- Be a Pro: We take ownership, act with integrity, and consistently deliver to a high standard.

- Bring the Energy: We bring positivity, curiosity, and enthusiasm to everything we do, inspiring those around us.

Culture Fit: These values define how we succeed as a team. If this isn’t you, this may not be the right place. We hire people who thrive in a fast-paced, collaborative, and ambitious environment.

### PERKS & BENEFITS

We offer a competitive salary and benefits package, alongside a dynamic, collaborative environment where your work truly makes an impact and your voice is heard. Our team is diverse, driven, and ambitious - united by a strong work ethic and a hunger to innovate and win.

Our benefits are designed around Health, Wealth, and Development, supporting you both professionally and personally.

### These include:

- Stock Options: Vest over 4 years, your success is our success.

- Pension Scheme: Competitive plan via Aviva, with up to 6% matched contributions if you opt in.

- Health Insurance: Comprehensive coverage to keep you and your family healthy.

- Enhanced Parental Leave: Enhanced maternity and paternity leave to support you through life’s most important moments.

- Stay Fuelled: Enjoy fresh, chef-made breakfast and lunch every day, plus a constant supply of fruit, snacks, tea, coffee and soft drinks, because great work starts with great food.

- Cycle-to-Work Scheme: Support for sustainable commuting and staying active.

- Learning & Development: £1,000 annual education budget for courses, conferences, books, or training.

- Holiday: 25 days paid leave + bank holidays, with the option to carry over 5 days.

- Flexible Working: Hybrid model with 3 days in the office and 2 days from home to fit your lifestyle.

- Global Working: Work from anywhere in the world for up to 20 days a year.

- Team Energy: Regular socials, hackathons, and events — because collaboration and fun go hand-in-hand.

Smarkets is an Equal Opportunity Employer, committed to equality, inclusion, and a welcoming environment for all.

**Live in Smarkets’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- MO [Senior Developer Experience Security Engineer](https://gurify.com/job/senior-developer-experience-security-engineer-at-motorway-8088847ce3c6) Motorway · London · 5 days ago
- DO [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-docebo-4f96857ca867) Docebo · London, United Kingdom · last week
- FL [HIPAA Security Engineer](https://gurify.com/job/hipaa-security-engineer-at-flohealth-6cf9ed9b16dd) Flohealth · London · 3 weeks ago
- XT [Security Engineer](https://gurify.com/job/security-engineer-at-xtxmarketstechnologies-1b8485e71b06) Xtxmarketstechnologies · London, United Kingdom · 2 weeks ago
- FL [HIPAA Security Engineer](https://gurify.com/job/hipaa-security-engineer-at-flohealth-6af953957ffa) Flohealth · London · 3 weeks ago
- AS [Senior Security Engineer (London, Hybrid)](https://gurify.com/job/senior-security-engineer-london-hybrid-at-assetreality-c53268ac7123) Assetreality · London, United Kingdom · 5 days ago

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Lead Security Engineer (DevSecOps \u0026 CISO)","description":"\u003Ch3\u003ELead Security Engineer (DevSecOps \u0026amp; CISO)\u003C/h3\u003E\u003Ch3\u003EABOUT SMARKETS\u003C/h3\u003E\u003Cp\u003ESmarkets is a prediction market exchange for sports and political trading, having handled over $50 billion in volume since 2010. We\u0026#39;re upending sports betting with the fairest prices, the best technology, and a superior customer experience \u2014 powered by attracting great people and building a high-performance environment where they thrive. We\u0026#39;re looking for an atypical candidate with strong regulated-business experience to support our growing CFTC business.\u003C/p\u003E\u003Ch3\u003ETHE ROLE\u003C/h3\u003E\u003Cp\u003EThis is our inaugural security hire, working alongside Infrastructure to protect the distributed, real-time systems behind our trading engine. You\u0026#39;ll lead our information security programme across our core products and our DCM/DCO entities \u2014 a founding build, standing up security engineering from the ground up through go-live and maturing it as we scale. Reporting directly to senior leadership and the Board, you\u0026#39;ll own security posture updates and ensure our risk management and incident response frameworks exceed regulatory and operational standards.\u003C/p\u003E\u003Ch3\u003EABOUT YOU\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ESecurity expert with hands-on experience building security engineering/DevSecOps capabilities in a cloud-native, high-growth environment \u2014 ideally financial services or exchange infrastructure\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExcellent communication skills for executive, board, and regulatory audiences\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFamiliarity with CFTC system safeguards expectations, including 17 C.F.R. \u0026#167; 38.1051 and \u0026#167; 39.18 or similar regulatory requirements\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI) and security tools (Snyk, Aqua, Trivy, Checkov, Twistlock, Clair)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHands-on expertise securing AWS/Azure/GCP, Kubernetes, containers, and IaC\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProficiency in Python, Bash, Go, or similar\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ERESPONSIBILITIES\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EFirst dedicated security engineering hire, working from within Infrastructure and Engineering teams to establish and evolve Smarkets\u0026#39; security capabilities\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOwn regulatory/industry engagement (including CFTC), reflecting external expectations in internal practice\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDefine a pragmatic, risk-based security strategy across cloud infrastructure, applications, trading systems, and corporate environment\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELead or support the investigation, containment and remediation of security incidents, including post-incident root cause analysis and corrective actions.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWork with Engineering teams to build security into the SDLC \u2014 SAST, DAST, SCA, container/IaC scanning in CI/CD \u2014 without becoming a delivery bottleneck\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EImplement controls across AWS, Kubernetes, containers, and IaC, hardening identity, secrets, and network access\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEstablish security monitoring and detection across applications, APIs, and infrastructure\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDevelop and maintain security policies, standards, and controls meeting DCM/DCO requirements\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMaintain evidence and documentation to support regulatory examinations and audits\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAct as a security partner to engineers, building a culture of ownership over security\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EDESIRABLE\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EPersonal interest in sports, exchanges, or trading\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECertifications: DSOP, CKS, CISSP, CCSP, CSSLP, or AWS/Azure/GCP Security Specialty\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETrack record of security automation at scale in Agile/Scrum\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDirect experience with regulators/examiners on technology and system safeguards\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFamiliarity with event contracts, prediction markets, or similar novel futures products under CFTC\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EOUR VALUES\u003C/h3\u003E\u003Cp\u003EOur values are at the heart of everything we do - guiding how we work, collaborate, and innovate. They reflect what we expect of ourselves and each other to deliver the best results, while fostering a positive, high-performing environment:\u003C/p\u003E\u003Cul\u003E\u003Cli\u003EPush to Win: We set ambitious goals and relentlessly pursue them, always striving for excellence.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMake Others Better: We lift each other up, share knowledge, and celebrate team success over individual achievement.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EGive a Shit: We care deeply about our work, our users, and the impact we make.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBe a Pro: We take ownership, act with integrity, and consistently deliver to a high standard.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBring the Energy: We bring positivity, curiosity, and enthusiasm to everything we do, inspiring those around us.\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003ECulture Fit: These values define how we succeed as a team. If this isn\u2019t you, this may not be the right place. We hire people who thrive in a fast-paced, collaborative, and ambitious environment.\u003C/p\u003E\u003Ch3\u003EPERKS \u0026amp; BENEFITS\u003C/h3\u003E\u003Cp\u003EWe offer a competitive salary and benefits package, alongside a dynamic, collaborative environment where your work truly makes an impact and your voice is heard. Our team is diverse, driven, and ambitious - united by a strong work ethic and a hunger to innovate and win.\u003C/p\u003E\u003Cp\u003EOur benefits are designed around Health, Wealth, and Development, supporting you both professionally and personally.\u003C/p\u003E\u003Ch3\u003EThese include:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EStock Options: Vest over 4 years, your success is our success.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPension Scheme: Competitive plan via Aviva, with up to 6% matched contributions if you opt in.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHealth Insurance: Comprehensive coverage to keep you and your family healthy.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEnhanced Parental Leave: Enhanced maternity and paternity leave to support you through life\u2019s most important moments.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStay Fuelled: Enjoy fresh, chef-made breakfast and lunch every day, plus a constant supply of fruit, snacks, tea, coffee and soft drinks, because great work starts with great food.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECycle-to-Work Scheme: Support for sustainable commuting and staying active.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELearning \u0026amp; Development: \u0026#163;1,000 annual education budget for courses, conferences, books, or training.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHoliday: 25 days paid leave \u002B bank holidays, with the option to carry over 5 days.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFlexible Working: Hybrid model with 3 days in the office and 2 days from home to fit your lifestyle.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EGlobal Working: Work from anywhere in the world for up to 20 days a year.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETeam Energy: Regular socials, hackathons, and events \u2014 because collaboration and fun go hand-in-hand.\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003ESmarkets is an Equal Opportunity Employer, committed to equality, inclusion, and a welcoming environment for all.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"lead-security-engineer-devsecops-ciso-at-smarkets-ac1914de51a4"},"url":"https://gurify.com/job/lead-security-engineer-devsecops-ciso-at-smarkets-ac1914de51a4","datePosted":"2026-08-11","validThrough":"2026-10-15T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Smarkets","sameAs":"https://jobs.ashbyhq.com/smarkets"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"GB","addressLocality":"London"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"United Kingdom","item":"https://gurify.com/jobs/united-kingdom"},{"@type":"ListItem","position":3,"name":"Lead Security Engineer (DevSecOps \u0026 CISO)","item":"https://gurify.com/job/lead-security-engineer-devsecops-ciso-at-smarkets-ac1914de51a4"}]}
```