Description
Fenergo is an award-winning provider of Client Lifecycle Management software solutions to help Investment, Corporate and Private Banks and Capital Markets firms, to manage their client and counterparty data, their regulatory compliance challenges and the on boarding of complex institutional clients. In 2015, Fenergo secured $75m funding from Insight Venture Partners to fuel future global growth and ranked in the Chartis Research RiskTech 100 (top 100 risk vendors in the world). Other accolades include Best Capital Markets Software Provider (2015), Best Enterprise Data Management from Inside Reference Data (2014), Technology Innovation of the Year Award by the ISA (2013) and Best Customer On boarding Solution by the Compliance Register (2012).
As Fenergo’s security team is growing we are now looking for a seasoned Security professional to help secure Fenergos product range. Fenergo processes the personal data of millions of people around the world. Having a repository of data that makes it a ripe target for attack by data hungry adversaries. By securing Fenergos pipelines, cloud environments and applications you could make a difference to millions of people around the world.
Main Responsibilities:
- Secure internet facing customer-facing applications that reside on the public cloud (AWS) and Advising on best practices such as WAFs
- Automate and integrate security tooling into CI/CD pipelines at scale.
- Evaluate, implement and operationalize additional tooling as needed. With a focus on AWS security tooling such Guard Duty, security hub etc
- Design the product security requirements, frameworks, services and standards used by Fenergos product development teams.
- Assess products for the security of the application and infrastructure. Including cloud native infrastructure such as Lambda Dynamo DB
- Drive remediation of any security issues found.
- Provide assurance that Fenergos product security requirements are implemented and effective.
- Arbitrate critical decisions correctly considering software best practices, system realities, and numerous stakeholders’ concerns.
- Partner with our infrastructure teams to grow our use of automation and infrastructure as code practices and allow us to operate securely at scale.
- Partner with our infrastructure teams to grow our use of automation and infrastructure as code practices and allow us to operate securely at scale.
- Communicate security topics to product teams through training and technical demonstration of vulnerabilities and secure design patterns.
- Lead development of new product security features to support the security needs of both Fenergo and our customers.
- Improve engineering standards, tooling, and processes.
Requirements
The successful candidate will need
- 5 years-experience in DevSecOps, Application Security, Penetration testing or similar.
- Previous experience in regulated industries, ideally Finance.
- Experience with securing AWS, AWS Native Services, Infrastructure as Code, Containerization, and Software Development processes.
- Relevant security training (OSCP, CCSP, GCSA, AWS Security)
- Excellent understanding of AWS and Network Security Standards.
- Excellent understanding of automated deployments and auto-scaling applications.
- Experience building security into deployment pipelines.
- Experience with penetration testing a plus
Benefits
- Opportunity to work with clients and colleagues on a global scale
- Extensive training programmes, classroom and online, through ‘Fenergo University’
- Opportunity to work on a cutting-edge Fintech Product, using the latest of tools and technologies
- Contributed pension.
- Bonus.
- Health care for you and your family.
- Active sports and social club.
- Flexible working hours, and work from home policy
- Awesome co-workers.