Senior Security Engineer (Platform Security Focus)

Just some of the reasons you’ll love working here include:

Your work will span the software delivery lifecycle. You'll give security guidance, review platform designs and put controls in place. You'll also improve how CMC protects its trading platforms, services and customer accounts.

Design, implement and continuously improve security controls protecting CMC's customer-facing trading platforms and APIs.

Partner with Engineering, Development and DevOps teams to embed security throughout the design, development and operation of customer-facing platforms.

Provide security guidance for new platform capabilities and technology initiatives, helping engineering teams identify security risks and implement appropriate security controls.

Support and enhance platform security capabilities, including web application protection, identity security and cloud security controls.

Review vulnerability assessments and penetration testing reports, partnering with engineering teams to prioritise and remediate security risks.

Lead or support the investigation and response to security incidents affecting customer-facing trading platforms, services and customer accounts.

Support the wider Security Operations function with technical expertise, investigations and security engineering initiatives.

Drive continuous improvements to platform security through enhancements to security tooling, automation, monitoring and detection capabilities.

5 years experience in Security Engineering, Platform Security or Application Security roles.

Experience in financial services, fintech, trading, banking or another highly regulated environment is highly desirable.

Demonstrated experience securing customer-facing platforms, applications and APIs , preferably within financial services, fintech or other highly regulated environments.

Strong hands-on experience implementing and managing Web Application Firewalls (WAFs) and other application-layer security controls.

Strong understanding of authentication, authorisation, identity providers and identity security concepts.

Experience working with application, platform and cloud architectures, with the ability to identify security risks and provide practical security guidance to engineering teams.

Demonstrated experience investigating and responding to security incidents affecting customer-facing platforms or digital services .

Experience reviewing vulnerability assessments and penetration testing reports, prioritising security risks and driving remediation activities .

Experience implementing and supporting security capabilities across application, platform and cloud environments.

Excellent communication and stakeholder engagement skills, with the ability to work effectively across both technical and non-technical teams.

Experience within financial services, fintech, trading or other highly regulated industries is highly desirable.

CMC Markets is powered by our people. We are an equal opportunities employer and are committed to creating a diverse and inclusive workplace, where our people feel confident to be themselves, feel valued and are able to do their best work. We don’t just value differences and unique perspectives, we seek them out and we invite them in, because we know it will lead to better outcomes for everyone

Click on the link to find out more about the things we live by at CMC Markets CMC Markets - Culture Video

We’re always on the lookout for great people, so even if you don’t feel you are a 100% fit, apply with your up-to-date CV and we’ll consider you for this role and any other suitable opportunities across the business.

We look forward to hearing from you!

Please be vigilant when applying for jobs online. CMC Markets will never request personal identification details, such as Date of Birth or Tax File Number prior to an offer being made. If your initial application is successful, regardless of whether you've applied directly or through an approved recruiter, you will always liaise with a representative from CMC's Talent Acquisition team. We will only discuss a role you have formally applied for via phone or email (CMC Markets email address); and never via Facebook or Telegram.