Senior DevSecOps Engineer

Final is a world leader in trading algorithms and trade execution technologies development. Our multi-disciplinary teams have developed a unique and highly successful machine learning algorithmic based HFT platform that delivers excellent results. In a world increasingly dominated by learning machines and artificial intelligence, we at Final are especially proud of our humans. Our elite team of exceptional people are the soul of our company, and it is our top priority to provide them with a professionally fulfilling environment that supports healthy work-life balance. Our employees are encouraged to pursue their passions outside of work and we are proud to offer them a variety of opportunities, multiple resources and an agile work environment which promotes their well-being.

We are looking for a talented, tech-savvy individual to join our Cyber Security team and help us tackle the toughest security challenges in Final’s cutting-edge ecosystem.

In this role, you will be a subject matter expert and play a major part in our efforts to build and maintain Final’s security infrastructure, design secure architectures, enforce security best practices, and automate security processes.

The Cyber Security team is composed of strong and experienced security engineers, responsible for defining the security strategy and managing all of Final’s infrastructure.

Responsibilities:

• Define, implement, and maintain Final’s security policies, standards, and methodologies; ensure they evolve with new threats and technologies.
• Design, deploy, and operate detection, prevention, and response technologies across a scaled, diverse, and complex environment (hybrid infrastructure: public cloud + on-premises).
• Build and operate secure infrastructure: hands-on ownership of security configurations and system hardening.
• Conduct security assessments, secure-design reviews and architecture assurance reviews to identify and mitigate possible security risks.
• Automate security processes: configuration deployments, infrastructure management, detection, response, compliance checks, patching, configuration drift, etc.
• Design, develop, and implement secure software development and deployment pipelines, incorporating best practices, automation, and CI/CD methodologies.
• Stay ahead of emerging cyber threats and technologies: research, evaluate, pilot, and integrate where relevant.
• Participate in creating incident response playbooks, coordinate incidents investigations, root cause analysis, and lessons learned.

• 4+ years of experience in security engineering, or equivalent.
• Strong hands-on experience with security tools, services, deployment automation, and configuration management.
• Demonstrated expertise in cloud security, including low-level design of secure cloud architectures (e.g., VPCs, network segmentation, endpoints, encryption).
• Solid understanding of operating systems (Linux, Windows, macOS) and networking fundamentals (TCP/IP, DNS, VLANs, routing, etc.).
• Well-versed in identity & access management: Conditional Access, Zero Trust, RBAC, identity lifecycle, access reviews, compliance, and governance.
• Hands-on experience with infrastructure as code.
• Experience securing microservices, containerized environments and serverless.
• Strong knowledge of modern Secure Software Development Lifecycle (SSDLC) practices: threat modeling, secure design, code reviews, API security, SAST/DAST/SCA.
• Programming/scripting skills to build automation, tools, and playbooks.
• Self-motivated and autodidactic, with the ability to deliver solutions end-to-end as part of a “do it yourself” approach.

Advantage:

• Relevant courses and qualifications.
• Experience in securing AWS services.