Security Platform Engineering Manager
Summary
Lead a team that secures cloud-native workloads on AWS and serverless, integrating security controls into CI/CD pipelines like GitHub Actions.
Salary: £62,000 - 102,000 per year
Requirements:- Demonstrable experience in securing cloud native workloads, ideally within AWS and serverless architectures
- Experience managing services required to deliver secure applications such as firewalls, package management, and secrets management
- Deep understanding of IAM, least privilege access design, and secure service-to-service communication patterns
- Proven ability to integrate security controls into CI/CD pipelines, preferably using GitHub Actions
- Experience enforcing security standards on Infrastructure as Code (e.g. via Policy as Code)
- Ability to translate regulatory or security policy requirements into practical, automated engineering controls
- Experience leading team technical delivery in a cross-functional environment with multiple stakeholder groups
- Proven track record of building and operating security capabilities at scale to support product development
- Preferred: Experience writing Terraform to configure and manage security tooling and services
- Preferred: Familiarity with GitHub Advanced Security features such as code scanning, dependency review, and secret scanning
- Preferred: Experience in developing hardened golden image pipelines for containers and virtual machines
- Preferred: Experience integrating Wiz or similar CNAPP tools into developer workflows
- Preferred: Experience delivering identity or access management capabilities as shared internal services
- Preferred: Experience operating in a Platform Engineering model supporting build and run squads in a regulated environment
- Work with the Head of Cloud and security stakeholders to define the strategic direction and technical vision of security platform engineering at CMC
- Build and lead a small team responsible for delivering security capabilities as reusable platform products
- Own the roadmap and technical delivery of these capabilities across cloud infrastructure, CI/CD, IAM, application integration patterns, and more
- Engage and collaborate with internal customers to understand upcoming use cases for the security platform
- Deliver hands-on contributions to the platform; set technical standards and approaches
- Operate and support the security platform services with clear reliability expectations and continuous improvement
- Drive measurable adoption of security platform services across engineering teams and report on coverage, risk reduction, and maturity
- Stay up-to-date on industry trends and emerging technologies and incorporate them into the platform roadmap as necessary
- Mentor and coach the team through pairing, feedback, and role modeling best practices
- AWS
- CI/CD
- Cloud
- GitHub
- IAM
- Support
- Security
- Serverless
- Terraform
- Embedded
More:
We are CMC Markets, an equal opportunities employer, dedicated to creating a diverse workplace. We are looking for a Security Platform Engineering Manager to lead the development of reusable security capabilities that enhance our product delivery process. This role combines technical leadership and hands-on engineering, with a focus on embedding security controls into our AWS-first, Terraform-led platform model. As part of our mission to make security the easiest path for our squads, you will work closely with various teams to drive adoption and ensure security is integrated into our development lifecycle, aiming to reduce risk through automation and enhance developer experience.
last updated 33 week of 2026