Head of Security Engineering (DevSecOps & CISO)
Head of Security Engineering (DevSecOps & CISO)
ABOUT SMARKETS
Smarkets is a prediction market exchange for sports and political trading, having handled over $50 billion in volume since 2010. We're upending sports betting with the fairest prices, the best technology, and a superior customer experience — powered by attracting great people and building a high-performance environment where they thrive. We're looking for an atypical candidate with strong regulated-business experience to support our growing CFTC business.
THE ROLE
This is our inaugural security hire, working alongside Infrastructure to protect the distributed, real-time systems behind our trading engine. You'll lead our information security programme across our core products and our DCM/DCO entities — a founding build, standing up security engineering from the ground up through go-live and maturing it as we scale. Reporting directly to senior leadership and the Board, you'll own security posture updates and ensure our risk management and incident response frameworks exceed regulatory and operational standards.
ABOUT YOU
Security expert with hands-on experience building security engineering/DevSecOps capabilities in a cloud-native, high-growth environment — ideally financial services or exchange infrastructure
Excellent communication skills for executive, board, and regulatory audiences
Familiarity with CFTC system safeguards expectations, including 17 C.F.R. § 38.1051 and § 39.18 or similar regulatory requirements
Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices
Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI) and security tools (Snyk, Aqua, Trivy, Checkov, Twistlock, Clair)
Hands-on expertise securing AWS/Azure/GCP, Kubernetes, containers, and IaC
Proficiency in Python, Bash, Go, or similar
RESPONSIBILITIES
First dedicated security engineering hire, working from within Infrastructure and Engineering teams to establish and evolve Smarkets' security capabilities
Own regulatory/industry engagement (including CFTC), reflecting external expectations in internal practice
Define a pragmatic, risk-based security strategy across cloud infrastructure, applications, trading systems, and corporate environment
Lead or support the investigation, containment and remediation of security incidents, including post-incident root cause analysis and corrective actions.
Work with Engineering teams to build security into the SDLC — SAST, DAST, SCA, container/IaC scanning in CI/CD — without becoming a delivery bottleneck
Implement controls across AWS, Kubernetes, containers, and IaC, hardening identity, secrets, and network access
Establish security monitoring and detection across applications, APIs, and infrastructure
Develop and maintain security policies, standards, and controls meeting DCM/DCO requirements
Maintain evidence and documentation to support regulatory examinations and audits
Act as a security partner to engineers, building a culture of ownership over security
DESIRABLE
Personal interest in sports, exchanges, or trading
Certifications: DSOP, CKS, CISSP, CCSP, CSSLP, or AWS/Azure/GCP Security Specialty
Track record of security automation at scale in Agile/Scrum
Direct experience with regulators/examiners on technology and system safeguards
Familiarity with event contracts, prediction markets, or similar novel futures products under CFTC
OUR VALUES
Push to win · Make others better · Give a shit · Be a pro · Bring the energy
COMPENSATION & BENEFITS
Competitive salary + stock options (4-year vesting)
Private health insurance
Pension (up to 6%)
£1,000 annual education budget
25 days annual leave + bank holidays (5 days carryover)
Hybrid working, plus 20 remote days/year globally
In-house chef, daily snacks and drinks
Cycle to work scheme
Smarkets is an Equal Opportunity Employer, committed to equality, inclusion, and a welcoming environment for all.
Find Jobs in United Kingdom on Arbeitnow
Skills
- Tech
Similar roles
Pricing Team Member - The Warehouse, Rangiora (Part-time)
The Warehouse·New Zealand
Job Description Te kaupapa o te tūranga - The purpose of the role. Hours of work are: * Tuesday 7:00pm - 12:00am Do you thrive in a dynamic and fast-paced environment where no two days are the same? Do you love interacting with customers and ensuring they have an exceptional shopping experience? If so, we have the perfect opportunity for…
- Full-time
- Skilled Migrant (Residence) — PR, points-based, no single employer
Part Time Urban Bus Drivers - Birkenhead x 2
Ritchies Transport·Birkenhead, New Zealand
The Opportunity We are looking for Class 2 or Class 4 Drivers with a P endorsement to join the team at our Birkenhead depot. These are permanent, part‑time urban driver opportunities. These positions are roster‑based, you are guaranteed a minimum of 40 hours per fortnight and applicants must be available to work early mornings, evenings, weekends, public holidays and broken/split…
- Full-time
- Skilled Migrant (Residence) — PR, points-based, no single employer
Specialist - Bots Strategy
Freshworks·Chennai, India
Key Responsibilities: * Own the end-to-end AI experience for the assigned product/BU, including intent fixes, content development, workflow curation, and resolution outcomes. * Create, consolidate, and refine Q&As; ensure accuracy, remove duplicates, and maintain persona & brand alignment. * Convert Q&As into structured knowledge articles; collaborate with the Content Strategy team on external content publishing. * Conduct independent conversation audits;…
- On-site
- Full-time
Digital and Engagement Officer - Contractor - London
Centre for Information Resilience·London, United Kingdom
The Centre for Information Resilience (CIR) is an independent organisation dedicated to exposing human rights violations, disinformation and harms against women and minorities. We achieve this through open source research, digital investigations, capacity-building with local partners, and collaboration with media to amplify our impact. CIR was born out of a determination to expose those spreading harm – online and offline…
- Hybrid
- Contract
Trauma-Informed Mindfulness & Wellness Skills Coach
2070Health·India
THIS JOB IS NOT WITH 2070 HEALTH About the Practice Intuitive Psychiatry is a San Francisco-based outpatient psychiatric practice providing thoughtful, evidence-informed care to adults with anxiety, depression, ADHD, insomnia, trauma-related concerns, and related mental-health needs. We are building a supportive wellness-skills program to help clinically stable patients practice effective self-regulation strategies between psychiatric appointments. This program complements, and does…
- Remote
- Full-time
Property Manager (FTC) - Maternity Cover
Cluttons·London, United Kingdom
The Property Manager position will undertake the day-to-day management of designated client’s rental properties. The role is based one day at head office on Cannon Street and two days at our Islington office. RESPONSIBILITIES * To undertake the day-to-day management of a designated portfolio of properties. * To ensure the effective planning and management of all maintenance and repair work…
- Hybrid
- Full-time
Centralised Advertising Operations Assistant.
Maker Lab·Mumbai, India
Grounded in a talent-centric mindset, Maker Lab is a marketing agency designed to build decentralised technology-led agency teams, rooted in collaboration with clients from the ground up. Maker Lab’s cross-functional teams of multidisciplinary specialists are embedded into client teams across digital marketing competencies — from measurement & analytics to content production. Job Summary: We're looking for a Centralised Advertising Operations…
- Remote
- Full-time
Centralised Advertising Operations Assistant.
Maker Lab·Gurugram, India
Grounded in a talent-centric mindset, Maker Lab is a marketing agency designed to build decentralised technology-led agency teams, rooted in collaboration with clients from the ground up. Maker Lab’s cross-functional teams of multidisciplinary specialists are embedded into client teams across digital marketing competencies — from measurement & analytics to content production. Job Summary: We're looking for a Centralised Advertising Operations…
- Remote
- Full-time
