Senior Security Engineer

• Embed directly within the Platform team in a true DevSecOps capacity, operating as a highly technical individual contributor bridging product-led engineering and Corporate IT. • Play a hands-on role challenging the security architecture of production and corporate IT infrastructure — no ivory tower, no throwing policies over the fence. • In your first 6–12 months, design and implement the next-generation cloud security architecture across AWS and GCP, while helping build and mature internal SOC capabilities including detection and response. • Take ownership of Microsoft Sentinel, enhancing SIEM/SOAR capabilities, and strengthen identity and access management through improved, automated RBAC across AWS, Microsoft Entra, and internal systems. • Drive a shift-left approach by embedding controls into GitLab CI/CD pipelines, including scanning, IaC reviews, and automated policy enforcement across the SDLC.

• Bring a strong track record in DevSecOps and cloud security engineering, with hands-on experience elevating the security posture of other organisations — a security professional by trade, a hacker by design. • Be a strong Python developer, able to script automation, interact with APIs, and build security tooling from scratch. • Bring a rock-solid understanding of network security fundamentals and how they apply to modern, distributed cloud architectures. • Own both the build and run sides of security, designing systems and responding to incidents. • Thrive in the dynamic, ambiguous, fast-paced environment of a high-growth startup, balancing rigorous security with engineering velocity.

• Bring hands-on experience with Microsoft Sentinel, Defender (XDR), or Defender for Cloud. • Have worked across both AWS and GCP security tooling, such as GuardDuty, Security Hub, Inspector, or Security Command Center. • Have embedded security controls into GitLab CI/CD pipelines. • Bring experience in fintech or another regulated environment. • Have hands-on experience with AWS CDK, Terraform, or CDK-TF.

• Contribute infrastructure-as-code (AWS CDK, Terraform) and review it for security risks prior to deployment. • Implement best-practice network security across AWS and GCP, covering IAM, VPCs, encryption, logging, and monitoring. • Embed zero-trust policies across the estate. • Actively challenge the security standards of production applications and infrastructure. • Embed security controls into CI/CD pipelines, including SAST, dependency scanning, and container security. • Partner with engineering teams on secure architecture and deployment patterns. • Support secure SDLC practices and pre-deployment security reviews.

Abound is one of the most exciting fintech stories in the UK right now. In just five years, the co-founders have built a profitable, fast-growing lending platform that was named the UK's number one fastest-growing tech company by The Sunday Times in 2026, with nearly 500% annual revenue growth. The company generated £69 million in revenue and £9 million in profit before tax in 2024, which is remarkable given that, among the top 15 high-growth UK companies tracked by Sifted, Abound was the only profitable one. They have secured £2.2 billion in lending capacity from Citi, Deutsche Bank, Waterfall, and others, and have been listed among the top 250 global fintechs by CNBC. What makes Abound especially interesting as a place to work is the leadership pedigree: Gerald Chappell was previously a Partner at McKinsey and EY, where he led digital lending and credit analytics solutions globally, while Dr Michelle He was a Director at EY with a PhD in machine learning. The broader leadership team brings experience from Goldman Sachs, Citi, Airbnb, and other major institutions. The UK Glassdoor entity sits at 4.6/5, with every single employee recommending it to a friend. What comes through in reviews is the flat structure, data-driven culture, quick career progression, and the chance to learn directly from seriously experienced leaders. Everyone gets equity ownership, a 30-day paid sabbatical after 4 years, a free WellHub membership, and plenty of team socials. A couple of things worth knowing: some Glassdoor reviews flag high targets and performance pressure, and Abound runs a hybrid model from its London offices rather than being fully remote. That said, if you want to be part of a profitable, rapidly scaling UK fintech where your work has a real impact on making credit fairer for millions of people, Abound is a brilliant place to do it.

• Own a piece of the company through equity. • Work hybrid, with 3 days a week in the office. • Take 25 days' holiday a year, plus 8 bank holidays. • Use 2 paid volunteering days each year. • Take a one-month paid sabbatical after 4 years. • Access an employee loan. • Enjoy free gym membership. • Tap a team wellness budget to be active together, whether that's a yoga class, a tennis lesson, or bouldering.

Abound is redefining consumer lending in the UK and beyond, using advanced AI and Open Banking data to make fair, affordable personal finance available to more people. Rather than relying on credit scores alone, it looks at each customer's full financial picture — how much they spend and what they can afford to repay. The approach works at scale: Abound has issued over £1.3bn in loans with market-leading credit performance, seeing three defaults for every ten the industry expects, and reached profitability just 2.5 years after launch. Backed by £2bn+ of funding from investors including Citi, GSR Ventures, and Deutsche Bank, it's recognised as one of Europe's fastest-growing fintechs and is now expanding into new markets and product lines.