‹ All jobs
Senior DevSecOps Engineer
<h2>Who are we?</h2><p style="min-height:1.5em"><em><strong>Smarkets: Predicting the Future of Betting</strong></em></p><p style="min-height:1.5em">Smarkets is a prediction market exchange for sports and political trading, having handled over $50 billion in volume since 2010. We're upending sports betting with the fairest prices, the best technology, and a superior customer experience, powered by attracting great people and building a high-performance environment where they thrive. We're looking for an atypical candidate with strong regulated-business experience to support our growing CFTC business.</p><p style="min-height:1.5em"></p><h2>The Team</h2><p style="min-height:1.5em">Security sits within Infrastructure and Engineering, protecting the distributed, real-time systems behind our trading engine. The team's remit spans our core products and our DCM/DCO entities, with a real regulatory dimension to the work, particularly around our CFTC-regulated business units. Alongside that regulatory scope, the focus is squarely on hands-on engineering: designing, building, and shipping the security tooling and controls that let engineering teams move fast safely.</p><p style="min-height:1.5em"></p><h2>About the Role:</h2><p style="min-height:1.5em">This is a founding build. You'll stand up security engineering from the ground up through go-live and mature it as we scale, working within Infrastructure and Engineering teams to build the controls, automation, and guardrails our trading systems and regulated entities need.</p><p style="min-height:1.5em"></p><h2>What you will do:</h2><ul style="min-height:1.5em"><li><p style="min-height:1.5em"><strong>Build the Foundations:</strong> Be part of a founding build, standing up security engineering from the ground up through go-live and maturing it as we scale, working within Infrastructure and Engineering teams.</p></li><li><p style="min-height:1.5em"><strong>Design Guardrails:</strong> Design, build, and deploy security controls and guardrails across cloud-native platforms, including AI security solutions protecting customer-facing and internal products.</p></li><li><p style="min-height:1.5em"><strong>Automate as Code:</strong> Automate security processes as code, embedding compliance and infrastructure-as-code checks into CI/CD pipelines without slowing down frequent shipping.</p></li><li><p style="min-height:1.5em"><strong>Assess & Remediate:</strong> Conduct risk audits and assessments, translating findings into practical recommendations for engineering teams, and be hands-on in implementing those recommendations.</p></li><li><p style="min-height:1.5em"><strong>Monitor & Respond:</strong> Monitor and analyse system access logs, flag anomalies, and support incident response, containment, and post-incident root cause analysis.</p></li><li><p style="min-height:1.5em"><strong>Plan for Resilience:</strong> Plan and test security backups and disaster recovery processes to keep the platform resilient.</p></li><li><p style="min-height:1.5em"><strong>Maintain Compliance:</strong> Develop and maintain security policies, standards, and controls meeting DCM/DCO requirements, and maintain evidence and documentation to support regulatory examinations and audits.</p></li><li><p style="min-height:1.5em"><strong>Partner Across Teams:</strong> Partner with business and engineering teams on solutions, tran