software engineer

ai engineer

senior software engineer

lead software engineer

senior data engineer

senior security engineer

Cognism

<div><div><h2 class="jobSectionHeader">WHO ARE WE</h2>

Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</div>
THE ROLE

The Senior Application Security Engineer is a key member of Cognism's Information Security Team, reporting into the Application &amp; Infrastructure Security Manager. Your mission is to embed security by design across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path.

You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception &ndash; all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day.

This role is ideal for a senior IC who is technical, collaborative, and pragmatic, with the ability to influence engineering teams while driving hands on improvements to Cognism's secure SDLC.

KEY RESPONSIBILITIES

Security by Design &amp; Product Integration
<ul>
<li>Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.</li>
<li>Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.</li>
<li>Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning.</li>
</ul>
Application Risk Assessment &amp; AI Security
<ul>
<li>Identify and assess application risks across Cognism's SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.</li>
<li>Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.</li>
<li>Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets.</li>
</ul>
Secure SDLC &amp; DevSecOps Enablement
<ul>
<li>Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.</li>
<li>Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).</li>
<li>Drive automation and developer-friendly security processes that minimize friction and support rapid delivery.</li>
</ul>
Threat Modelling &amp; Architecture Support
<ul>
<li>Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.</li>
<li>Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.</li>
<li>Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.</li>
<li>Maintain and expand Cognism's secure coding standards, guidance, and reusable security patterns.</li>
</ul>
Application Security Testing &amp; Engineering
<ul>
<li>Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.</li>
<li>Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.</li>
<li>Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies.</li>
</ul>
Collaboration, Education &amp; Influence
<ul>
<li>Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape.</li>
<li>Deliver security training, workshops, and guidance to improve engineering teams' security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders.</li>
</ul>
CORE COMPETENCIES
<ul>
<li>Strong technical depth in application security, cloud security, and secure development.</li>
<li>Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.</li>
<li>Deep understanding of communication protocols used for web development is a must-have.</li>
<li>Hands on experience with web application development, specifically for back-end development is a must-have competency.</li>
<li>Risk-Based Prioritization: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a &quot;risk-driven&quot; rather than &quot;compliance-driven&quot; mindset. Comfortable balancing security risk with product and commercial realities.</li>
<li>Contextual Communication: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners.</li>
<li>Collaborative Conflict Resolution: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience. Pragmatic problem solver with a growth mindset and bias toward action.</li>
<li>Architectural Empathy: Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles.</li>
</ul>
EDUCATION &amp; EXPERIENCE
<ul>
<li>5&ndash;10+ years of experience in Application Security, Product Security, or Security Engineering roles.</li>
<li>Strong experience securing cloud native SaaS platforms (AWS preferred) and Data pipelines.</li>
<li>Handson experience with secure coding, application testing, and CI/CD security automation.</li>
<li>Experience working closely with engineering and product teams in agile environments.</li>
<li>Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.</li>
<li>Experience evaluating and securing AI/ML enabled features is a strong advantage.</li>
<li>Experience in SME or high-growth SaaS environments preferred.</li>
</ul><div>
<h2 class="jobSectionHeader">WHY COGNISM</h2>

At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who support, challenge, and inspire each other every day. If you're looking for a place where your work truly makes an impact, you're in the right spot!

Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.

Here's what we stand for:

 We Own the Outcome Together. 
 We Deeply Understand our Customers. 
 We Celebrate Impact Wherever It Comes From.

At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</div></div>

Senior Application Security Engineer

Blockchain

<div><div>Blockchain is connecting the world to the future of finance. As the most trusted and fastest-growing global crypto company, it helps millions of people worldwide safely access cryptocurrency. Since its inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.</div>
You will operate the Product Security programe for Blockchain.com's internally-developed products across Consumer, OTC and MRE lines. This is a senior, hands-on role: you'll design and run the secure development lifecycle, lead threat modeling and architecture review, own the security debt lifecycle for product engineering teams, and architect the automated pipelines that protect billions in transaction volume. You will embed with product and engineering teams, convert technical findings into business-prioritized remediation, and lift developer capabilities so security is delivered by code and process.

WHAT YOU WILL DO
<ul>
<li>Strategic Security Partnership: Act as a senior security engineer for the different product lines like Consumer, OTC. You will own the security gates for major feature releases and ensure security is integrated from the design phase.</li>
<li>Secure SDLC Operator: Operate and improve the secure development lifecycle. This includes orchestrating SAST/SCA/DAST, streamlining SARIF ingestion, PR review standards, CI/CD security automation, and vulnerability triage workflows.</li>
<li>AI-Driven SDLC Innovation: Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into our secure development lifecycle.</li>
<li>Threat Modelling &amp; Architecture Reviews: Lead STRIDE/attack-tree threat models for sensitive flows including authentication, payment, custody, reconciliation and sign off on security architecture for critical designs.</li>
<li>Product Security Governance &amp; Standards: Translate technical risks and regulatory demands into clear security policies. You will own the creation and upkeep of our Application Security Standards, reference architectures, and compliance-driven secure coding baselines.</li>
<li>Bug Bounty Leadership: Oversee the technical triage and remediation strategy for our Bug Bounty program. You will turn external researcher findings into internal architectural hardening projects.</li>
<li>Release Reviews: Perform deep-dive manual code reviews of security-sensitive Pull Requests, mentor engineers on secure coding patterns, and provide pragmatic remediation guidance.</li>
<li>Advanced Code Auditing: Conduct deep-dive manual and automated code reviews on highly sensitive Java and Kotlin backend Pull Requests.</li>
<li>Security Debt &amp; Remediation Negotiation: Produce data-driven Security Debt packs and negotiate remediation into engineering roadmaps. You will negotiate remediation timelines with Product Owners and Engineering leadership, backed by risk-based data.</li>
<li>Detection &amp; Telemetry Integration: Define application runtime signals (business-logic anomalies, auth anomalies, reconciliation mismatches) and work with SecOps to instrument logs and alerts.</li>
<li>Testing &amp; Automation: Build and maintain product-level test harnesses, fuzzing/property tests and CI checks to prevent regressions for business-critical flows.</li>
<li>Incident Response Support: Provide product-level Incident Response expertise like test forensic runbooks, support reproduction of payment/settlement incidents, and advise on containment/remediation whenever needed.</li>
<li>Metrics &amp; Risk Visibility: Define and own the Product Security metrics (e.g., MTTR for critical vulnerabilities, security debt burn-down, and defect density). You will translate these KPIs into high-level risk reports for the Head of Security and Engineering leadership to drive data-backed resourcing decisions.</li>
<li>People &amp; Process: Coach junior product security engineers and security champions. You will assist the Product Security Lead to define hiring standards and capability plans.</li>
</ul>
WHAT YOU WILL NEED

Must-Haves
<ul>
<li>4+ years total security engineering experience with at least 3+ years focused specially in application/product security or equivalent.</li>
<li>Experience with Web, Mobile, Cloud, Infrastructure Pentests and Red Teaming (e.g., phishing)</li>
<li>Proven track record of shipping security automation using CodeQL/GHAS, Snyk, or similar. You should be intimately familiar with the SARIF ecosystem and ASPM workflows.</li>
<li>Expert-level ability to audit and propose fixes in Kotlin/Java, TypeScript/JS, Python, and familiarity with containerised deployments (Kubernetes).</li>
<li>Strong threat modeling experience and pragmatic architecture guidance for high-stakes financial flows (AuthN/AuthZ, Cryptography, Payments).</li>
<li>Experience building CI checks, test harnesses and lightweight fuzzing/property tests.</li>
<li>Excellent stakeholder skills &mdash; able to negotiate remediation with Engineering Directors and Product owners, balancing security requirements with business velocity.</li>
</ul>
Nice-to-haves
<ul>
<li>Prior fintech/Trading/OTC product security experience or familiarity with custody/signing patterns.</li>
<li>Practical experience designing or deploying AI-assisted security tooling, leveraging LLMs for automated software patch generation, or evaluating vulnerability detection agents within enterprise developer pipelines.</li>
<li>Prior experience operating alongside GRC frameworks, authoring developer-facing security policies from scratch, and building automated policy-as-code gateway integrations.</li>
<li>Public track record of CVEs, security research, or open-source contributions to security tooling.</li>
<li>Advanced credentials such as OSCP, OSWE, CISSP or equivalent.</li>
<li>Experience with on-chain/off-chain integration, payment reconciliation, or smart contract security.</li>
<li>Familiarity with vulnerability management platforms (DefectDojo, Dependabot orchestration) and GRC/Gateway integrations.</li>
<li>Prior contributions to security automation and developer tooling (open source or internal).</li>
</ul>
COMPENSATION &amp; PERKS
<ul>
<li>Full-time salary based on experience and meaningful equity in an industry-leading company</li>
<li>This is a role based in our London office, with a mandatory in-office presence four days per week.</li>
<li>Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.</li>
<li>ClassPass</li>
<li>Unlimited vacation policy; work hard and take time when you need it</li>
<li>Apple equipment</li>
<li>The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field</li>
<li>Flexible work culture</li>
</ul><div>
Blockchain is committed to diversity and inclusion in the workplace and is proud to be an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, religion, color, national origin, gender, gender expression, sex, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, and apprenticeship. Blockchain makes hiring decisions based solely on qualifications, merit, and business needs at the time.

You may contact our Data Protection Officer by email at dpo@blockchain.com. Your personal data will be processed for the purposes of managing Controller's recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.

Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller's behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under the standard contractual clauses.

Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have the right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.</div></div>

Senior Product Security Engineer

Harmonic Security

<div>AI is being run everywhere, by humans and agents. Harmonic Security governs all of it. The AI Governance and Control (AIGC) platform understands user / agent intent and data context in real time, giving security teams visibility and control across every tool and workflow so companies can move faster with AI while minimizing risk.
We operate in one of the fastest-moving spaces in tech: the emerging intersection of AI and cybersecurity. It's a market still being defined, and we're among the first to build natively for it - protecting sensitive data in real time, at the endpoint, with minimal friction for the teams using it. Enterprises get full visibility and control. Their people get to innovate without guardrails slowing them down.
Named to the Rising in Cyber 2026 list, Harmonic is gaining serious recognition and serious traction. We're led by deep cybersecurity expertise and backed by investors who know the space: N47, Ten Eleven Ventures, and In-Q-Tel.
As AI adoption inside the enterprise accelerates, the ability to safely observe, control, and enforce policy in real time isn't a nice-to-have. It's mission-critical infrastructure. That's what we build.<h2 class="jobSectionHeader">
How We Work: AI-First by Design</h2>
Harmonic exists to help enterprises adopt AI safely and at scale. We hold ourselves to the same standard. Everyone at Harmonic actively uses AI tools to do their best work, from research and writing to building processes and automating workflows. We expect every new hire to bring curiosity about AI and a willingness to use it to work smarter, faster, and more creatively. For some roles, that means tinkering and staying open to new tools. For others, it means building entirely new systems with AI at the core. We'll be clear about what we expect for each role, and we'll give you the tools and support to get there.<h2 class="jobSectionHeader">
About the Team</h2>
The Security &amp; TechOps team builds the systems, tooling, and research that keep Harmonic secure, trusted, and able to move fast. We work across the entire lifecycle of how the company operates-from how we build software, to how we detect threats, to how we prove our security posture to customers, to how employees use the technology that powers their work.
We focus on enabling speed without sacrificing safety. That means creating secure-by-default engineering practices, building automation and detections that reduce manual work, researching emerging AI security risks, running assurance programmes like SOC 2 and ISO 27001, and shaping the internal platforms that help teams work efficiently and securely.
We&rsquo;re a hands-on, engineering-first group. We avoid box-ticking and heavy process in favour of practical solutions, strong automation, and constant improvement. We collaborate closely across functions, operate with high ownership, and support each other through rapid growth. Our shared goal is to build the trust, systems, and capabilities that let Harmonic innovate confidently and at scale.<h2 class="jobSectionHeader">
About the Role</h2>
Our goal is simple: enable engineering teams to move fast and ship securely. We do this by creating the tools, standards, and systems that make secure development seamless. Whether it&rsquo;s hardening pipelines, tuning detection tooling, or staying ahead of emerging AI risks, we build the connective tissue that keeps Harmonic&rsquo;s products secure and trusted.
This team operates at the heart of our engineering culture - hands-on, collaborative, and pragmatic. We bridge the gap between security and development, helping both move faster and with more confidence.
We&rsquo;re looking for a Staff Security Engineer, Product to shape how Harmonic builds secure products from the start. You&rsquo;ll lead the creation of tools, standards, and practices that make secure development part of our everyday engineering workflow.
You&rsquo;ll work closely with Engineering and DevOps to integrate security into design, build, and deployment. From managing code scanning and vulnerability tooling to supporting product pen tests and monitoring AI-related risks, you&rsquo;ll help teams ship fast and safely while building lasting confidence in our products.<h2 class="jobSectionHeader">
What You&rsquo;ll Do</h2><ul><li>
Act as the security partner to engineering - helping teams design, build, and ship securely without slowing down development.</li><li>
Drive and maintain the tooling that underpins product security - from code scanning and vulnerability detection to CI/CD hardening and reporting.</li><li>
Keep a close eye on our own AI systems and tools - monitoring emerging threats and ensuring our AI security posture evolves with the field.</li><li>
Lead threat modelling across the product - running structured STRIDE and LINDDUN assessments on new features and system designs, building repeatable templates, and using AI tooling to make it faster and more scalable. The goal is making threat modelling a normal part of how we build, not a separate event.</li><li>
Use AI to build and scale the product security function - integrating tools like Claude Code into security workflows, from automated threat modelling to building internal security tooling. A high-performing programme, not necessarily a large one.</li></ul><h2 class="jobSectionHeader">
What You Bring</h2><ul><li>
Demonstrable software engineering experience in programming, application design and SLDC.</li><li>
Proven experience as a Product or Application Security Engineer in a modern engineering environment - you understand how products are built and shipped.</li><li>
Curiosity for emerging threats, especially around AI and ML systems, and a drive to keep our defences one step ahead.</li><li>
Excellent communicator who can translate between engineering, security, and go-to-market teams - clear, direct, and grounded in technical reality.</li><li>
Hands-on experience with structured threat modelling, including both security and privacy threat modelling methodologies (e.g. STRIDE, LINDDUN).</li><li>
Strong Claude Code or equivalent AI coding agent experience. Demonstrated use of agentic AI to build, automate, and accelerate security engineering work. This is a must-have.</li></ul><h2 class="jobSectionHeader">
You Might Be a Fit If You</h2><ul><li>
Like working closely with engineering teams to embed security into everyday development without slowing them down.</li><li>
Enjoy building and tuning security tools, pipelines, and dashboards that give developers useful signal - not noise.</li><li>
Can translate complex security risks into clear, actionable guidance for engineers and product teams.</li><li>
Want to shape how secure development happens in a high-growth, modern engineering organisation.</li><li>
Reach for Claude Code as a first instinct when building or automating something, and want to apply that to building a product security function that punches well above its weight</li></ul><h2 class="jobSectionHeader">
Why Join Us</h2>
This isn&rsquo;t just a job; it&rsquo;s an opportunity to be part of a team that is redefining cybersecurity. We believe today&rsquo;s talent is tomorrow&rsquo;s success, and we&rsquo;re committed to creating an environment where you can do the best work of your life.<ul><li>
Competitive pay and meaningful equity with a direct stake in Harmonic&rsquo;s success</li><li>
Comprehensive benefits, pension plan, generous PTO, and flexible hybrid work</li><li>
A small, passionate team that values transparency, creativity, and learning</li><li>
Thoughtful leadership that cares deeply about growth, impact, and people</li><li>
Annual global off-sites (past trips include Lisbon and Nashville)</li><li>
The chance to directly shape both our product and our culture as we build a category-defining company</li></ul><h2 class="jobSectionHeader">
Harmonic's Core Values</h2><div>
</div><h3 class="jobSectionHeader">
Flourish in the Unknown</h3>
We embrace new, unfamiliar situations that require initiative and rapid decision-making. We orient ourselves quickly and deliver results with minimal guidance.<div> 
</div><h3 class="jobSectionHeader">
Never Full</h3>
We raise our hands, take on challenges, and assist others whenever possible. We hunger for opportunities to learn and do more.<div> 
</div><h3 class="jobSectionHeader">
Perfect Harmony</h3>
We support one another to create cohesion and unity. We collaborate openly, share feedback honestly, and help everyone produce their best work.
Compensation Range: &pound;125K - &pound;135K</div>

Staff Security Engineer, Product

Deliveroo

<div>About the team
At Doordash, Deliveroo and Wolt, we&rsquo;re building the industry&rsquo;s most scalable and reliable delivery network to support our multi-sided marketplace of consumers, merchants, Dashers, and partners. Security, privacy, and compliance are foundational to earning and maintaining trust as we expand globally.
The Governance, Risk, and Compliance team partners across Security, Engineering, Legal, Privacy, Product, IT, Procurement, Internal Audit, and business teams to help DoorDash understand its compliance obligations, manage security and privacy risk, and build durable programs that scale with the company.
About the role
We&rsquo;re looking for a Senior Information Security Specialist to help mature DoorDash&rsquo;s global security and privacy compliance risk program. You will create and operationalise a global compliance change process framework that helps DoorDash detect changes in our compliance landscape, assess impact, identify gaps, and drive accountable remediation across teams.
This is a senior individual contributor role for someone who has managed global compliance frameworks and security/privacy compliance programs in a technology company. You will bring structure to ambiguous compliance changes, translate requirements into actionable control expectations, facilitate risk workshops, and help leadership understand compliance risk in clear business terms.
What you'll be doing<ul><li>
Design and operate a global compliance change management framework to identify new or changing security, privacy, regulatory, contractual and framework obligations across DoorDash&rsquo;s markets and products.</li><li>
Maintain a structured view of DoorDash&rsquo;s compliance landscape, including obligation inventories, control mappings, ownership models, risk decisions and remediation status.</li><li>
Lead compliance-impact assessments for new regulations, framework updates, product launches, market expansions, vendor changes and major technology initiatives.</li><li>
Facilitate compliance risk workshops with Engineering, Legal, Privacy, Product, Procurement, IT, Internal Audit and business stakeholders.</li><li>
Translate complex regulatory, security, and privacy requirements into practical control expectations and specifications that technical and non-technical teams can implement.</li><li>
Identify control gaps, assess residual risk, define remediation plans and track progress through closure with clear accountability.</li><li>
Partner with control owners to improve evidence quality, audit readiness, and sustainable operation of controls across global compliance frameworks.</li><li>
Help mature DoorDash&rsquo;s risk register, compliance reporting, dashboards, metrics and executive-level risk communications.</li><li>
Support control mapping and harmonization across frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS, GDPR, UK GDPR, NIS2, DORA, and emerging AI governance requirements.</li><li>
Promote a risk-based, pragmatic compliance culture that enables DoorDash teams to move quickly while protecting customers, partners, employees and the business.</li></ul>
Requirements<ul><li>
You have 6+ years of experience in GRC, security compliance, technology risk, privacy compliance, IT audit, or a related field, preferably in a global technology, marketplace, SaaS, fintech or payments environment.</li><li>
You have managed or materially contributed to a global compliance framework or security/privacy compliance management program.</li><li>
You have built, operated or significantly improved a compliance change management, obligations management, control mapping or regulatory-change process.</li><li>
You have hands-on experience facilitating risk assessments, compliance risk workshops, control self-assessments and remediation planning with cross-functional stakeholders.</li><li>
You have strong working knowledge of security and privacy frameworks such as ISO 27001, SOC 2, GDPR or CCPA, and you can quickly assess applicability of new frameworks or regulatory requirements.</li><li>
You understand how security and privacy controls operate in modern technology environments, including cloud infrastructure, identity and access management, SDLC, incident response, vendor risk, data governance and business continuity.</li><li>
You can translate legal, regulatory and framework requirements into clear, tangible control specifications to engineers and explain technical risk in business terms.</li><li>
You communicate clearly, write with precision and can create high-quality policies, procedures, risk memos, control narratives, executive updates, and decision records.</li><li>
You are comfortable navigating ambiguity, balancing multiple priorities and driving outcomes without relying on constant direction.</li><li>
You build trust with technical and non-technical stakeholders and can facilitate conversations rather than dictate outcomes.</li></ul>
Why Doordash, Deliveroo and Wolt
Our mission is to transform the way you shop and eat, bringing the neighbourhood to your door by connecting consumers, restaurants, shops and riders. We are transforming the way the world eats and shops by making access to food and products more convenient and enjoyable. We give people the opportunity to buy what they want, as they want it, when and where they want it.
We are a technology-driven company at the forefront of the most rapidly expanding industry in the world. We are still a small team, making a very large impact, looking to answer some of the most interesting questions out there. We move fast, value autonomy and ownership, and we are always looking for new ideas.
Workplace &amp; Benefits
At Doordash we know that people are the heart of the business and we prioritise their welfare. Benefits differ by country, but we offer many benefits in areas including healthcare, well-being, parental leave, pensions, and generous annual leave allowances, including time off to support a charitable cause of your choice. Benefits are country-specific, please ask your recruiter for more information.
Diversity
At Doordash, we believe a great workplace is one that represents the world we live in and how beautifully diverse it can be. That means we have no judgement when it comes to any one of the things that make you who you are - your gender, race, sexuality, religion or a secret aversion to coriander. All you need is a passion for (most) food and a desire to be part of one of the fastest-growing businesses in a rapidly growing industry.
We are committed to diversity, equity and inclusion in all aspects of our hiring process. We recognise that some candidates may require adjustments to apply for a position or fairly participate in the interview process. If you require any adjustments, please don't hesitate to let us know. We will make every effort to provide the necessary adjustments to ensure you have an equitable opportunity to succeed.</div>

Senior Information Security Specialist

HOMETRACK

<div>Hybrid working pattern - 2 days per week from London Bridge Office
Hometrack is seeking an experienced Senior Data Engineer to join our product team to help us deliver Hometrack's Data Services ambitions. By building the best property data sets available, which back the market leading AVM, trusted by 17 out of the top 20 mortgage lenders in the UK, we open the door to helping all our customers make the decisions that matter to them - to buy, to lend, to build.
The Data Services team works with 100s of customers across the property sector ranging from mortgage lenders, house builders, investors, fin &amp; proptech, insurers, telco, retail and utilities, as well as others involved in the housing market. Our mission is to inform decision makers by putting the UK&rsquo;s most trusted property data and insights at the heart of the property ecosystem.
Our market intelligence and customer acquisition, retention and engagement solutions are relied upon by leading industry professionals.
Data Services has a diverse product range covering market, property and mover intelligence, delivered through varying mechanisms including data platforms, reports and APIs, providing maximum flexibility when matching our customers&rsquo; needs to the most effective data solution.
Hometrack is looking for an experienced senior data engineer to help us make this a reality.
What we&rsquo;re looking for in a Senior Data Engineer:<ul><li>
Be accountable for team outcomes, playing your part in achieving team goals and ensuring your contribution positively impacts overall success</li><li>
Be a continual improver, looking for ways to help the team do better and be better, again and again</li><li>
Write maintainable, testable code and enjoy providing code reviews</li><li>
Be experienced with Databricks, Delta Lake and Lakehouse architecture for efficient data management; experience with ETL processes and optimizing data pipelines for performance</li><li>
Be strong in Python, SQL, and PySpark</li><li>
Be passionate about building data products for stakeholders and customers, ensuring they are stable, scalable, secure, accurate, observable, and performant</li><li>
Enjoy collaborating closely with colleagues in Product, Analytics, Security, and Software, explaining technical concepts to non-technical audiences</li></ul></div>

Senior Data Engineer

ZNG Cover

About ZNG CoverZNG Cover is the leading embedded insurer for the luxury goods industry. ZNG revolutionises the world of insurance by providing specialist, invite-only insurance.We are a fast-growing company with a driven, motivated team that is excited about what we&rsquo;re doing. We want to hire people who will share in our excitement at building this business.The successful candidate will be working within a tight team, with opportunities for personal and professional development, and most importantly they will create opportunities for themselves. ZNG is growing and we want people who will grow with us.About the RoleWe are currently seeking a Senior DevOps Engineer to join the development team. You will be primarily responsible for managing cloud infrastructure, DevOps processes, and CI/CD pipelines.As a Senior DevOps Engineer you will be tasked with the following:<ul><li>Designing, implementing, and maintaining AWS infrastructure, including core services such as App Runner, ECS, CloudFormation, Lambda, ECR, and IAM</li><li>Leading the implementation of new infrastructure for new territories</li><li>Managing CI/CD pipelines with Bitbucket and GitHub to deploy containerised applications</li><li>Improving platform reliability, scalability, and monitoring</li><li>Contributing to infrastructure-as-code best practices</li><li>Supporting application security and cloud governance</li><li>Helping shape technical architecture decisions</li><li>Collaborating closely with product, design, and engineering teams</li></ul>We are looking for someone that has:<ul><li>Experience as a DevOps Engineer</li><li>Demonstrable skills creating and maintaining AWS infrastructure, CI/CD pipelines, and Docker</li><li>An Associate or Professional-level AWS certification</li><li>Excellent English verbal and written communication skills</li></ul>Pay: &pound;55,000.00-&pound;70,000.00 per yearBenefits:<ul><li>Casual dress</li><li>Company pension</li><li>Cycle to work scheme</li><li>Employee discount</li><li>Free or subsidised travel</li><li>Sabbatical</li></ul>Work Location: Hybrid remote in London N1 6ED

Senior DevOps Engineer

JPMorganChase

<div>JOB DESCRIPTION 
 
 
Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that prioritize security from the start.
Job Summary:
As a Senior DevSecOps Architect in the Cybersecurity &amp; Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy, and serving as the subject matter expert for the DevSecOps strategy as well as embedding automated security controls into CI/CD pipelines. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.
Job Responsibilities:
<ul><li>Pipeline Security Architecture - Design, implement, and continuously improve security architecture for CI/CD pipelines and DevOps toolchains, ensuring automated security checks are embedded at every stage from code commit to production deployment.</li>
<li>Security-as-Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments.</li>
<li>Threat Modeling &amp; Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive adoption of secure design patterns.</li>
<li>Automated Guardrails at Scale - Design and deploy automated preventive and detective guardrails to proactively reduce risk across CICD pipelines, cloud and SaaS environments.</li>
<li>Security Culture &amp; Enablement - Cultivate a security-first culture across product, technology, and business teams by providing developer-friendly tooling, training, and reusable secure patterns that accelerate rather than hinder delivery.</li>
<li>Risk &amp; Issue Management - Act with urgency to manage emerging security issues, monitor risk indicators, and recommend resolutions. Serve as the escalation point for IT Risk and Cyber domains related to DevSecOps and Change Management.</li>
<li>Stakeholder Partnership - Partner with engineering leads, product owners, and vendors to ensure effective technology risk management, translating regulatory and policy requirements into actionable, engineer-friendly controls.</li>
<li>Audit &amp; Regulatory Support - Support audit, regulatory, and risk activities by providing evidence of control effectiveness and translating compliance requirements into automated, repeatable processes.</li>
<li>Continuous Improvement - Identify and address unfamiliar technology components, share best practices, and influence peers to drive continuous improvement in DevSecOps maturity across the organization.</li>
</ul>Required Qualifications, Capabilities, and Skills:
<ul><li>Advanced threat modeling experience (e.g., STRIDE-LM) for DevOps/CICD Pipelines and toolchains.</li>
<li>Expert ability to advise and influence secure pipeline architecture using Policy-as-Code and automated gates.</li>
<li>Hands-on security expertise in AWS and GCP.</li>
<li>Practical experience creating reference architectures and patterns for engineering teams.</li>
<li>Proven ability to design and deploy automated preventive and detective guardrails at scale.
</li><li>Expertise in leveraging IaC scanning to detect misconfigurations and compliance violations across Terraform and Kubernetes manifests</li>
<li>Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions</li>
<li>Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security.</li>
<li>Ability to solve design and functionality problems independently.</li>
<li>Strong written and verbal communication skills.</li>
<li>Demonstrated success in influencing peers and stakeholders.</li>
<li>Ability to evaluate and recommend emerging technologies for future state architecture.</li>
</ul>Preferred Qualifications, Capabilities, and Skills:
<ul><li>Shift-Left/Start-Left Evangelism - A proven track record of mentoring developers and fostering a culture where security is a shared responsibility</li>
<li>Relevant certifications: AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer, CISSP, CKS, OSCP.</li>
<li>Experience operating in regulated organizations with a 3LoD model.</li>
<li>Willingness to challenge existing processes respectfully.</li>
<li>Experience translating policy and regulatory requirements into control design for engineers and architects.</li>
<li>Proven ability to upskill and learn modern technologies.</li>
<li>Experience in financial services consumer businesses or Fintech organizations.</li>
</ul>#ICBCareers
ABOUT US
 
 
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. 
<div><div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. 
</div></div> 
 
ABOUT THE TEAM
 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Senior DevSecOps Architect

Explore 645+ Senior security engineer in London this July. Find roles across top companies and apply now to boost your career.