Senior Security Engineer (FinTech)

Location: London, UK; on-site

Company

hirify.global is a financial information and software company building market intelligence products with cloud infrastructure and agentic AI for global capital markets.

What you will do

• Own security engineering across AWS and GCP infrastructure, including EC2, EKS, microservices, and automated patching.
• Run detection and response by triaging alerts, expanding coverage, and handling significant out-of-hours security incidents.
• Threat-model products, embed security checks into CI/CD, and secure SaaS integrations and OAuth connections.
• Define and implement security controls for AI agents and production generative AI systems.
• Own SOC 2 Type II audits, annual web application pentests, security policies, and automated evidence collection in Drata.
• Support onboarding and offboarding, endpoint management, access administration, and the core SaaS estate across Google Workspace and GitLab.

Requirements

• 5+ years of security experience spanning multiple domains.
• Advanced hands-on AWS knowledge and practical Kubernetes experience, ideally with EKS.
• Experience threat-modelling web applications and responding to real security incidents.
• Experience using AI agents, understanding of SOC 2, and comfort with Git.
• Working knowledge of Jamf and solid scripting ability in Python or Bash.
• Ability to switch between security engineering, IT, and GRC work while maintaining attention to detail and courteous user support.

Nice to have

• High-level experience with both Jamf and Intune.
• Experience securing microservice architectures or EKS clusters.
• Experience using AI agents in production security workflows.
• SQL skills for detection and incident investigation.
• Experience deploying DAST or SAST in production.

Culture & Benefits

• Work in a fast-moving FinTech environment with broad ownership of the security function.
• Collaborate across business units to implement effective security mitigations.
• Opportunity to define the company’s approach to the emerging security challenges of AI agents.
• Role includes out-of-hours response to significant security alerts.