Senior Staff Information Security Engineer

Provide technical direction for vulnerability and exposure management across AWS and on-premises infrastructure.

Identify recurring patterns across incidents, penetration tests, vulnerabilities, and control assessments.

Act as a senior technical escalation point during significant security incidents.

Ensure investigations and lessons learned result in durable architectural and engineering improvements.

Lead complex security initiatives spanning multiple teams and planning cycles.

Mentor security engineers and provide guidance to engineers in adjacent teams.

Raise the standard of security architecture, automation, documentation, and technical decision-making.

Communicate security risks and recommendations clearly to technical teams, product leaders, and senior stakeholders.

What you'll bring:

Significant experience in security engineering, infrastructure security, cloud security, security architecture, or platform engineering.

Deep, hands-on experience securing AWS environments.

Strong knowledge of AWS identity and access management, network architecture, account governance, encryption, logging, monitoring, secrets management, and workload protection.

Experience designing or securing on-premises, data-centre, or colocation-hosted infrastructure.

Strong knowledge of enterprise networking, segmentation, firewalls, secure remote access, privileged administration, and hybrid connectivity.

Experience with infrastructure-as-code, CI/CD security, containerised environments, and cloud-native platforms.

Demonstrated experience designing and implementing automated security controls and engineering solutions.

Proficiency with scripting or software development using Python, Go, or a comparable language.

Practical experience using AI-assisted tooling to improve security engineering and operational workflows.

Experience leading complex initiatives across multiple engineering, infrastructure, or product teams.

Strong knowledge of security architecture, threat modelling, vulnerability management, detection, and incident response.

The ability to operate independently, navigate ambiguity, and influence decisions across technical and leadership audiences.

Desirable experience:

An advanced AWS certification in security, architecture, networking, or cloud engineering.

Experience in fintech, payments, SaaS, or another regulated technology environment.

Experience securing large or complex AWS multi-account estates.

Experience with Kubernetes, container security, software supply-chain security, and policy-as-code.

Experience with technologies such as CNAPP, CSPM, SIEM, EDR, DLP, WAF, vulnerability-management, network-security, or secrets-management platforms.

Familiarity with PCI DSS, SOC 2, GDPR, NIST, or ISO 27001.

Experience supporting significant security incidents, penetration tests, audits, or customer security assessments

Annual bonus scheme dependent on individual and company performance

Annual salary of £90,000 - £130,000 depending on experience

25 days holiday each year (+ bank holidays + 1 day after each year of service with up to a max. of 30 days)

Workplace pension scheme

Private medical insurance (upon 30 days of employment)

7 hours per day, 35 hours per week

A remote first culture

Great work-life balance with our Flexi-time policy

Family Friendly policies (Enhanced Maternity and Paternity Pay and Shared Parental Leave).

A chance to develop with an allocated company training budget

Bike2Work Scheme

Lifeworks, an Employee Assistance Programme which offers wellbeing, family and financial support services, such as assessments, resources and even 1:1 counselling sessions. It also offers interesting perks such as discounts on gyms, restaurants, high street retailers and cinema tickets

A strong commitment to employee wellbeing including mental health first aiders

Employee referral scheme with generous financial reward

Bonusly colleague reward scheme

What we do!

NMI enables our partners with choice, and challenges the one-size-fits-all approach to payments. You've probably used NMI in the last 24 hours without even realizing it. We’re the platform that powers success for innovative tech created by SMBs, entrepreneurs and fintech startups. We’re creative problem solvers who help visionaries smash through boundaries and think beyond what’s possible so they can think about what’s next. But we’re not just built for the tech savvy. We democratize the latest payments technology so that everyone can realize the benefits of easy payments across the full spectrum of commerce. We’re all about enabling more payments in more ways and more places.

We believe that having a diverse group of employees strengthens both our work and our workplace. We’re focused on making NMI more diverse and welcoming with initiatives like having a dedicated Diversity, Equity & Inclusion action group, diversity goals for hiring, anonymized resume screening, affinity groups such as our Women's network and LGBTQ+ Network, open forums for discussions on diversity and social justice, and measuring inclusion and belonging as part of our regular employee engagement surveys.

Equal Opportunity

NMI is committed to providing equal employment opportunity for all persons regardless of race, color, religion, sex, age, marital status, national origin, sexual orientation or sexual identity, genetic information, citizen status (except those that do not have the legal right to be employed in the United States), disability, military service, service member, veteran status, or any other basis protected by applicable law.

Please be aware that all offers of employment are made subject to receipt of satisfactory background and financial checks.

Attention job applicants: Please note that in compliance with the data protection regulations within your jurisdiction, any personal information submitted with your job application may be collected and used by NMI for the purpose of recruitment and employment-related activities. By submitting your application, you acknowledge and provide explicit consent to the processing of your personal information as described in our privacy policy found on our website. For more information on how we process your information, please read our privacy policy here: https://www.nmi.com/legal/privacy-policy/

#LI-Remote