Security Engineer

Your Impact:

• We are a dedicated security team of 9 working to ensure we strictly follow the principles of secure-by-design, zero trust, and the principle of least privilege. We have the luxury of building a security function in a greenfield environment, which means we operate at the cutting edge with modern best practices. We are always seeking out and open to new and novel ways to improve the security posture of our company.

• Security isn’t just about our team though, at Upvest it’s part of the culture. The team itself is one of the oldest within (our young) company, which should show you how it’s always been a central tenet of how Upvest defines itself. Within the security team you will have a large view of the whole organisation and work closely with every department.

What you’ll do:

• Act as a security subject matter expert for the entire company, operating across multiple disciplines from application and cloud security to GRC. While your work will be broad, your primary focus will be on partnering with our Product Engineering teams to embed a "secure by default" mindset

• Work with our team and Product and Engineering to perform detailed security architecture reviews of new functionality (facilitating threat modeling is a plus)

• Field security questions and requests with confidence and an aim to mentor and educate

• Scale the security team by finding areas where security tasks can be automated (and improved)

• Be comfortable working with the cloud (specifically Google Cloud is a plus) and how to tackle its security challenges

• Ensure that across the product and cloud we have the technical measures in place to continue meeting our own standards, obligations, regulations and certifications (ISO27001, ISAE3402 Type 2, DORA, etc)

• Drive high-impact initiatives and be a present security advocate