About this role
Salary: £62,000 - 102,000 per year
Requirements: Demonstrable experience in securing cloud native workloads, ideally within AWS and serverless architecturesExperience managing services required to deliver secure applications such as firewalls, package management, and secrets managementDeep understanding of IAM, least privilege access design, and secure service-to-service communication patternsProven ability to integrate security controls into CI/CD pipelines, preferably using GitHub ActionsExperience enforcing security standards on Infrastructure as Code (e.g. via Policy as Code)Ability to translate regulatory or security policy requirements into practical, automated engineering controlsExperience leading team technical delivery in a cross-functional environment with multiple stakeholder groupsProven track record of building and operating security capabilities at scale to support product developmentPreferred: Experience writing Terraform to configure and manage security tooling and servicesPreferred: Familiarity with GitHub Advanced Security features such as code scanning, dependency review, and secret scanningPreferred: Experience in developing hardened golden image pipelines for containers and virtual machinesPreferred: Experience integrating Wiz or similar CNAPP tools into developer workflowsPreferred: Experience delivering identity or access management capabilities as shared internal servicesPreferred: Experience operating in a Platform Engineering model supporting build and run squads in a regulated environment Responsibilities: Work with the Head of Cloud and security stakeholders to define the strategic direction and technical vision of security platform engineering at CMCBuild and lead a small team responsible for delivering security capabilities as reusable platform productsOwn the roadmap and technical delivery of these capabilities across cloud infrastructure, CI/CD, IAM, application integration patterns, and moreEngage and collaborate with internal customers to understand upcoming use cases for the security platformDeliver hands-on contributions to the platform; set technical standards and approachesOperate and support the security platform services with clear reliability expectations and continuous improvementDrive measurable adoption of security platform services across engineering teams and report on coverage, risk reduction, and maturityStay up-to-date on industry trends and emerging technologies and incorporate them into the platform roadmap as necessaryMentor and coach the team through pairing, feedback, and role modeling best practices Technologies: AWSCI/CDCloudGitHubIAMSupportSecurityServerlessTerraformEmbedded More:
We are CMC Markets, an equal opportunities employer, dedicated to creating a diverse workplace. We are looking for a Security Platform Engineering Manager to lead the development of reusable security capabilities that enhance our product delivery process. This role combines technical leadership and hands-on engineering, with a focus on embedding security controls into our AWS-first, Terraform-led platform model. As part of our mission to make security the easiest path for our squads, you will work closely with various teams to drive adoption and ensure security is integrated into our development lifecycle, aiming to reduce risk through automation and enhance developer experience.
last updated 32 week of 2026