Principal Security Engineer
位置：远程英国/欧元报告线：首席风险官关于 Auros Auros 是一个全球数字资产流动性提供商，在集中和分散市场上24小时运营。我们运行可用性高的低延迟系统，其中弹性和风险纪律是重要的。安全被视为核心工程和风险功能，直接从高级领导层中参与。我们正在聘请一名实践的主要安全工程师来实施并操作我们的基础设施中的安全控制。这是一个技术执行角色，你将编写代码，配置系统，以及运输安全改进，而不是撰写政策或管理人员。你将与基础设施和工程团队密切合作，加强我们的云环境，保护我们的 CI/CD 管道，并保护企业和生产系统。范围广泛，环境快速，并且预计你将拥有端到端的问题。我们认为安全应该使业务能够实现，而不是阻碍它。你将设计有效但无干扰的控制，在背景下运行而不给工程师或交易员造成摩擦。你将做什么 · 实施和维护多云环境中的安全控制 （主要是 AWS 和 Azure,有 GCP 和 AliCloud）和本地基础设施 · IAM 战略和执行：设计和执行安全，可扩展且实用的身份，访问和许可模型 · 设计和运行关键管理和保管安全控制 （如 HSM,秘密管理和交易操作的密钥处理）· 硬化 CI/CD 管道 (GitLab) 和确保软件交付流程 · 配置和运营企业安全工具 （终点保护，MDM/Jamf,DLP,身份管理）·应对安全事件：分类，调查，封闭，纠正 · 对基础设施和应用程序进行安全评估 · 自动化安全操作：检测，警报和响应 ·与基础设施合作，将安全嵌入云配置和系统配置中 我们正在寻找什么 · 8年以上的安全工程或安全运营实践经验 · 强有力的，对 IAM 的观点 （你在云环境中设计并实施了身份和访问管理，并且有一个明确的哲学如何工作）· 多家提供商中的安全云控制知识 （AWS 和 Azure 预言）
查看英文原文
Location: Remote UK/Euro
Reporting line: Chief Risk Officer
About Auros
Auros is a global digital asset liquidity provider operating 24/7 across centralised and decentralised markets. We run high-availability, low-latency systems where resilience and risk discipline matter. Security is treated as a core engineering and risk function, with direct engagement from senior leadership.
The Role
We're hiring a hands-on principal security engineer to implement and operate security controls across our infrastructure. This is a technical execution role where you'll be writing code, configuring systems, and shipping security improvements, not writing policies or managing people.
You'll work closely with Infrastructure and Engineering teams to harden our cloud environments, secure our CI/CD pipelines, and protect both corporate and production systems. The scope is broad, the environment is fast-paced, and you'll be expected to own problems end-to-end.
We believe security should enable the business, not obstruct it. You'll design controls that are effective but unobtrusive, security that works in the background without creating friction for engineers or traders.
What You'll Do
- Implement and maintain security controls across multi-cloud environments (primarily AWS and Azure, with some GCP and AliCloud) and on-prem infrastructure
- Own IAM strategy and implementation: design and enforce identity, access, and permissions models that are secure, scalable, and practical
- Design and operate key management and custody security controls such as HSMs, secrets management, and secure key handling for trading operations
- Harden CI/CD pipelines (GitLab) and secure the software delivery process
- Configure and operate corporate security tooling (endpoint protection, MDM/Jamf, DLP, identity management)
- Respond to security incidents: triage, investigate, contain, remediate
- Conduct security assessments of infrastructure and applications
- Automate security operations: detection, alerting, and response
- Work with Infrastructure to embed security into cloud provisioning and system configuration
What We're Looking For
- 8+ years' hands-on experience in security engineering or security operations
- Strong, opinionated views on IAM (you've designed and implemented identity and access management across cloud environments and have a clear philosophy on how it should work)
- Strong working knowledge of cloud security controls across multiple providers (AWS and Azure preferred)
- Experience securing CI/CD platforms, GitLab preferred
- Familiarity with corporate IT security tooling (Jamf, endpoint protection, DLP, SSO/IdP)
- Comfortable in Linux environments and scripting (Python, Bash, or similar)
- Experience with infrastructure-as-code (Terraform, Pulumi etc.) is a plus
- Exposure to financial services, crypto, or other regulated environments is a plus but not required
We value demonstrated skills and practical experience over certifications.
What You Get
- Direct ownership of security implementation
- A small, technical team where your work has immediate impact
- Exposure to low-latency trading infrastructure and the digital asset space
Originally posted on Himalayas