# Senior Security Engineering Manager

[Ebury](https://gurify.com/jobs?q=Ebury) · London · Posted today

Senior

[Engineering Manager](https://gurify.com/jobs/engineering-manager)

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://job-boards.eu.greenhouse.io/ebury/jobs/5006937101)

## Job description

Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed.

If you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future.

### Senior Security Engineering Manager

•
Location: Madrid or London

### About Ebury

Established in 2009, Ebury is a London-based financial technology company specialising in cross-border financial services for SMEs. Our comprehensive suite includes international payments, foreign exchange risk management, business lending, and mass payment solutions, all delivered via an integrated digital platform.

Backed by Banco Santander (54% majority stake) and recognized in the Financial Times’ list of Europe’s Fastest-Growing Companies, Ebury employs over 1,700 professionals across 40+ offices in 25+ countries. Our success is powered by diverse, high-performing teams revolutionising global fintech.

### Role Overview

Ebury is investing heavily in product and platform security across our global financial services ecosystem. Security Engineering is a deeply technical, hands-on discipline that partners directly with software and platform engineers to build security into every stage of the release lifecycle.

Scope distinction: This team focuses purely on core engineering challenges—not GRC, policy writing, IT desktop security (e.g., endpoint AV), or SecOps/incident response.

You will lead a distributed team of elite security engineers spanning cloud security, penetration testing, and software development. Your mandate covers high-impact engineering domains: vulnerability management, AI threat modelling, secure software development lifecycles (SSDLC), agentic SDLC workflows, disaster recovery planning (DRP), and cloud infrastructure hardening.

Reporting to the Engineering Director – Platform & Security, you will balance strategic architectural leadership with deep technical execution to safeguard our services in a high-scale, regulated fintech environment.

### Key Responsibilities

### Leadership & Security Architecture

•
Team Leadership: Manage, recruit, and mentor a global team of security engineers, fostering technical excellence and clear career progression paths.

•
Architecture Design: Define and implement high-level security architecture across existing systems and greenfield projects.

•
Engineering Alignment: Partner with Software Engineering and Platform leadership to embed security requirements into roadmaps and sprint cycles.

•
Technical Rigour: Stay actively hands-on—conduct architecture design reviews, review critical code, and act as the final decision-maker on complex technical security trade-offs.

•
Executive Reporting: Deliver measurable, data-backed metrics and reporting on technical security posture to executive stakeholders.

### Secure Software Development Lifecycle (SSDLC) & AI Workflows

•
Strategy & Tooling: Define and scale the SSDLC strategy, integrating automated security testing (SAST, DAST, SCA) seamlessly into CI/CD pipelines.

•
Threat Modelling: Institutionalise continuous threat modelling across product teams.

•
Agentic Workflows: Design and evolve guardrails and secure frameworks tailored for modern agentic software development and AI-assisted workflows.

### Vulnerability Management & Red Teaming

•
Programme Ownership: Direct the end-to-end vulnerability management programme, including continuous discovery, context-aware triage, remediation SLAs, and board-level risk reporting.

•
Remediation Drive: Partner with engineering managers to resolve systemic and critical vulnerabilities, unblocking blockers and escalating when timelines slip.

•
Next-Gen Tooling: Direct AI-assisted tooling strategies, including continuous scanning pipelines and internal automated red-teaming platforms.

### Identity & Access Management (IAM)

•
IAM Architecture: Direct identity and access management architecture across multi-cloud infrastructure and customer-facing microservices.

•
Privileged Access: Ensure authentication, authorisation, least privilege, and Privileged Access Management (PAM) controls strictly satisfy compliance and internal audit benchmarks.

### Cloud & Network Security Posture

•
Platform Partnership: Collaborate closely with Platform Engineering to define security guardrails on AWS and GCP (network segmentation, perimeter defence, container runtime security).

•
Change Governance: Review and sign off on high-risk architectural changes across platform and cloud network boundaries.

•
Audit & Technical Assurance: Support technical external audits and close compliance gaps (ISO 27001, SOC 2, DORA) through direct engineering implementations rather than paperwork.

### What You’ll Bring

### Technical Leadership & Hands-on Depth

•
8+ years of total experience across software engineering, platform engineering, or security engineering, including 3+ years directly managing engineering teams.

•
Former software engineer or technical security specialist who transitioned into engineering management while retaining deep technical fluency.

•
Proven track record designing, building, and running security controls at scale across public clouds (AWS and/or GCP) and container orchestration systems (Kubernetes).

•
Hands-on mastery of secure coding practices, modern DevSecOps integration, threat modelling, and federated identity protocols (OAuth2, OIDC, SAML).

### Execution & Stakeholder Management

•
Proven ability to translate high-level business risk into prioritised, actionable engineering backlogs.

•
Strong track record delivering multi-quarter technical initiatives from inception to measurable completion.

•
Data-driven decision-maker comfortable defending technical positions to executives and engineers alike.

•
Pragmatic delivery mindset: balancing ironclad security controls with engineering velocity.

### Domain Knowledge & Soft Skills

•
Professional experience within regulated financial services, fintech, or payment processing environments.

•
Practical understanding of security frameworks (NIST CSF, ISO 27001, CIS benchmarks).

•
Exceptional written and verbal communication in English, with the clarity to articulate nuanced risk concepts to cross-functional teams.

•
Demonstrated success leading remote or distributed teams across multiple geographies.

### Desired Experience & Qualifications

•
Experience dual-running or migrating workloads across both AWS and GCP.

•
Hands-on experience operationalising LLM/AI security models or agentic automation in software engineering.

•
Industry certifications reflecting broad architecture and offensive depth (e.g., CISSP, CISM, OSCP, or hyperscaler Security Specialties).

### About us

Ebury delivers sophisticated, integrated solutions — business accounts, hedging, and financing — on a single platform with a seamless workflow. Our success is built on a simple premise and singular purpose: To help businesses operate and scale globally.

Since its founding in 2009, Ebury has always been a fast-growing leader in fintech. Today, we bring together 2000+ Eburians across nearly 70 cities and we’re always looking to add to our team.

At the heart of our offering is a proprietary platform, purpose-built to help businesses seamlessly streamline and manage global cash flow. We focus on continuous product evolution and innovation to build the infrastructure for borderless growth and help our clients scale at every stage.

The opportunities at Ebury are as diverse as our people, ranging from business development to engineering roles across our tech pillars.

We believe in inclusion. We stand against discrimination in all forms and are against the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story.

Important Security Notice for Job Applicants:
Ebury only accepts applications via official Ebury channels. We will only contact you from an @ebury.com domain. Always check the emails you receive from us, and note that we will never request payment for any part of the recruitment process. Stay safe and report suspicious activity.

Notice to Recruitment Agencies and Search Firms:
Ebury does not accept unsolicited resumes, CVs, or candidate profiles from recruitment agencies or search firms without signed written Ebury recruitment terms in place for a specific role. Any unsolicited applications will be considered the sole property of Ebury. Ebury will not be responsible or liable for any placement fees or costs associated with unagreed candidate submissions or subsequent hires.

AI Transparency Statement:
Ebury uses Artificial Intelligence (AI) and automated tools to help streamline certain parts of our recruitment process, however, these tools are strictly for administrative efficiency. All hiring decisions, including application reviews, shortlisting, and final selections are evaluated and conducted by human talent acquisition professionals and hiring managers.

**Live in Ebury’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- FL [Engineering Manager](https://gurify.com/job/engineering-manager-at-flohealth-1c00b5991fab) Flohealth · London · last week
- SO [Engineering Manager - Ads](https://gurify.com/job/engineering-manager-ads-at-soundcloud71-cf7e3329689d) Soundcloud71 · London · last week
- TR [Machine Learning Engineering Manager](https://gurify.com/job/machine-learning-engineering-manager-at-trainline-606c70066777) Trainline · London · last week
- EB [Engineering Manager (Identity)](https://gurify.com/job/engineering-manager-identity-at-ebury-72363376de2c) Ebury · London · 6 weeks ago
- KE [Engineering Manager](https://gurify.com/job/engineering-manager-at-kernel-71a1b68856eb) Kernel · London · last week
- OP [Engineering Manager, Guardian](https://gurify.com/job/engineering-manager-guardian-at-openai-4e853bf14608) Openai · London, United Kingdom · yesterday

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Senior Security Engineering Manager","description":"\u003Cp\u003EEbury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed.\u003C/p\u003E\u003Cp\u003EIf you\u2019re a collaborator who wants to help transform how businesses operate globally, get in touch - we\u2019d love to discuss how Ebury can accelerate your career so you can shape the future.\u003C/p\u003E\u003Ch3\u003ESenior Security Engineering Manager\u003C/h3\u003E\u003Cp\u003E\u2022\u003Cbr /\u003ELocation: Madrid or London\u003C/p\u003E\u003Ch3\u003EAbout Ebury\u003C/h3\u003E\u003Cp\u003EEstablished in 2009, Ebury is a London-based financial technology company specialising in cross-border financial services for SMEs. Our comprehensive suite includes international payments, foreign exchange risk management, business lending, and mass payment solutions, all delivered via an integrated digital platform.\u003C/p\u003E\u003Cp\u003EBacked by Banco Santander (54% majority stake) and recognized in the Financial Times\u2019 list of Europe\u2019s Fastest-Growing Companies, Ebury employs over 1,700 professionals across 40\u002B offices in 25\u002B countries. Our success is powered by diverse, high-performing teams revolutionising global fintech.\u003C/p\u003E\u003Ch3\u003ERole Overview\u003C/h3\u003E\u003Cp\u003EEbury is investing heavily in product and platform security across our global financial services ecosystem. Security Engineering is a deeply technical, hands-on discipline that partners directly with software and platform engineers to build security into every stage of the release lifecycle.\u003C/p\u003E\u003Cp\u003EScope distinction: This team focuses purely on core engineering challenges\u2014not GRC, policy writing, IT desktop security (e.g., endpoint AV), or SecOps/incident response.\u003C/p\u003E\u003Cp\u003EYou will lead a distributed team of elite security engineers spanning cloud security, penetration testing, and software development. Your mandate covers high-impact engineering domains: vulnerability management, AI threat modelling, secure software development lifecycles (SSDLC), agentic SDLC workflows, disaster recovery planning (DRP), and cloud infrastructure hardening.\u003C/p\u003E\u003Cp\u003EReporting to the Engineering Director \u2013 Platform \u0026amp; Security, you will balance strategic architectural leadership with deep technical execution to safeguard our services in a high-scale, regulated fintech environment.\u003C/p\u003E\u003Ch3\u003EKey Responsibilities\u003C/h3\u003E\u003Ch3\u003ELeadership \u0026amp; Security Architecture\u003C/h3\u003E\u003Cp\u003E\u2022\u003Cbr /\u003ETeam Leadership: Manage, recruit, and mentor a global team of security engineers, fostering technical excellence and clear career progression paths.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EArchitecture Design: Define and implement high-level security architecture across existing systems and greenfield projects.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EEngineering Alignment: Partner with Software Engineering and Platform leadership to embed security requirements into roadmaps and sprint cycles.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003ETechnical Rigour: Stay actively hands-on\u2014conduct architecture design reviews, review critical code, and act as the final decision-maker on complex technical security trade-offs.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EExecutive Reporting: Deliver measurable, data-backed metrics and reporting on technical security posture to executive stakeholders.\u003C/p\u003E\u003Ch3\u003ESecure Software Development Lifecycle (SSDLC) \u0026amp; AI Workflows\u003C/h3\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EStrategy \u0026amp; Tooling: Define and scale the SSDLC strategy, integrating automated security testing (SAST, DAST, SCA) seamlessly into CI/CD pipelines.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EThreat Modelling: Institutionalise continuous threat modelling across product teams.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EAgentic Workflows: Design and evolve guardrails and secure frameworks tailored for modern agentic software development and AI-assisted workflows.\u003C/p\u003E\u003Ch3\u003EVulnerability Management \u0026amp; Red Teaming\u003C/h3\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EProgramme Ownership: Direct the end-to-end vulnerability management programme, including continuous discovery, context-aware triage, remediation SLAs, and board-level risk reporting.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003ERemediation Drive: Partner with engineering managers to resolve systemic and critical vulnerabilities, unblocking blockers and escalating when timelines slip.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003ENext-Gen Tooling: Direct AI-assisted tooling strategies, including continuous scanning pipelines and internal automated red-teaming platforms.\u003C/p\u003E\u003Ch3\u003EIdentity \u0026amp; Access Management (IAM)\u003C/h3\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EIAM Architecture: Direct identity and access management architecture across multi-cloud infrastructure and customer-facing microservices.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EPrivileged Access: Ensure authentication, authorisation, least privilege, and Privileged Access Management (PAM) controls strictly satisfy compliance and internal audit benchmarks.\u003C/p\u003E\u003Ch3\u003ECloud \u0026amp; Network Security Posture\u003C/h3\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EPlatform Partnership: Collaborate closely with Platform Engineering to define security guardrails on AWS and GCP (network segmentation, perimeter defence, container runtime security).\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EChange Governance: Review and sign off on high-risk architectural changes across platform and cloud network boundaries.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EAudit \u0026amp; Technical Assurance: Support technical external audits and close compliance gaps (ISO 27001, SOC 2, DORA) through direct engineering implementations rather than paperwork.\u003C/p\u003E\u003Ch3\u003EWhat You\u2019ll Bring\u003C/h3\u003E\u003Ch3\u003ETechnical Leadership \u0026amp; Hands-on Depth\u003C/h3\u003E\u003Cp\u003E\u2022\u003Cbr /\u003E8\u002B years of total experience across software engineering, platform engineering, or security engineering, including 3\u002B years directly managing engineering teams.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EFormer software engineer or technical security specialist who transitioned into engineering management while retaining deep technical fluency.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EProven track record designing, building, and running security controls at scale across public clouds (AWS and/or GCP) and container orchestration systems (Kubernetes).\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EHands-on mastery of secure coding practices, modern DevSecOps integration, threat modelling, and federated identity protocols (OAuth2, OIDC, SAML).\u003C/p\u003E\u003Ch3\u003EExecution \u0026amp; Stakeholder Management\u003C/h3\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EProven ability to translate high-level business risk into prioritised, actionable engineering backlogs.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EStrong track record delivering multi-quarter technical initiatives from inception to measurable completion.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EData-driven decision-maker comfortable defending technical positions to executives and engineers alike.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EPragmatic delivery mindset: balancing ironclad security controls with engineering velocity.\u003C/p\u003E\u003Ch3\u003EDomain Knowledge \u0026amp; Soft Skills\u003C/h3\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EProfessional experience within regulated financial services, fintech, or payment processing environments.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EPractical understanding of security frameworks (NIST CSF, ISO 27001, CIS benchmarks).\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EExceptional written and verbal communication in English, with the clarity to articulate nuanced risk concepts to cross-functional teams.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EDemonstrated success leading remote or distributed teams across multiple geographies.\u003C/p\u003E\u003Ch3\u003EDesired Experience \u0026amp; Qualifications\u003C/h3\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EExperience dual-running or migrating workloads across both AWS and GCP.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EHands-on experience operationalising LLM/AI security models or agentic automation in software engineering.\u003C/p\u003E\u003Cp\u003E\u2022\u003Cbr /\u003EIndustry certifications reflecting broad architecture and offensive depth (e.g., CISSP, CISM, OSCP, or hyperscaler Security Specialties).\u003C/p\u003E\u003Ch3\u003EAbout us\u003C/h3\u003E\u003Cp\u003EEbury delivers sophisticated, integrated solutions \u2014 business accounts, hedging, and financing \u2014 on a single platform with a seamless workflow. Our success is built on a simple premise and singular purpose: To help businesses operate and scale globally.\u003C/p\u003E\u003Cp\u003ESince its founding in 2009, Ebury has always been a fast-growing leader in fintech. Today, we bring together 2000\u002B Eburians across nearly 70 cities and we\u2019re always looking to add to our team.\u003C/p\u003E\u003Cp\u003EAt the heart of our offering is a proprietary platform, purpose-built to help businesses seamlessly streamline and manage global cash flow. We focus on continuous product evolution and innovation to build the infrastructure for borderless growth and help our clients scale at every stage.\u003C/p\u003E\u003Cp\u003EThe opportunities at Ebury are as diverse as our people, ranging from business development to engineering roles across our tech pillars.\u003C/p\u003E\u003Cp\u003EWe believe in inclusion. We stand against discrimination in all forms and are against the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story.\u003C/p\u003E\u003Cp\u003EImportant Security Notice for Job Applicants:\u003Cbr /\u003EEbury only accepts applications via official Ebury channels. We will only contact you from an @ebury.com domain. Always check the emails you receive from us, and note that we will never request payment for any part of the recruitment process. Stay safe and report suspicious activity.\u003C/p\u003E\u003Cp\u003ENotice to Recruitment Agencies and Search Firms:\u003Cbr /\u003EEbury does not accept unsolicited resumes, CVs, or candidate profiles from recruitment agencies or search firms without signed written Ebury recruitment terms in place for a specific role. Any unsolicited applications will be considered the sole property of Ebury. Ebury will not be responsible or liable for any placement fees or costs associated with unagreed candidate submissions or subsequent hires.\u003C/p\u003E\u003Cp\u003EAI Transparency Statement:\u003Cbr /\u003EEbury uses Artificial Intelligence (AI) and automated tools to help streamline certain parts of our recruitment process, however, these tools are strictly for administrative efficiency. All hiring decisions, including application reviews, shortlisting, and final selections are evaluated and conducted by human talent acquisition professionals and hiring managers.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"senior-security-engineering-manager-at-ebury-4a9c4eb90bdf"},"url":"https://gurify.com/job/senior-security-engineering-manager-at-ebury-4a9c4eb90bdf","datePosted":"2026-10-29","validThrough":"2026-12-13T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Ebury","sameAs":"https://job-boards.eu.greenhouse.io/ebury"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"GB","addressLocality":"London"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"United Kingdom","item":"https://gurify.com/jobs/united-kingdom"},{"@type":"ListItem","position":3,"name":"Senior Security Engineering Manager","item":"https://gurify.com/job/senior-security-engineering-manager-at-ebury-4a9c4eb90bdf"}]}
```