Principal Security Engineer

As a Principal Security Engineer at Auros, you implement and operate security controls across a global digital asset liquidity provider running 24/7 across centralised and decentralised markets. You report to the Chief Risk Officer and work closely with Infrastructure and Engineering teams to harden cloud environments, secure CI/CD pipelines, and protect both corporate and production systems. This is a hands-on technical execution role where you write code, configure systems, and ship security improvements end-to-end.

What you'll do

• Implement and maintain security controls across multi-cloud environments (primarily AWS and Azure, with some GCP and AliCloud) and on-premises infrastructure
• Own IAM strategy and implementation: design and enforce identity, access, and permissions models that are secure, scalable, and practical
• Design and operate key management and custody security controls such as HSMs, secrets management, and secure key handling for trading operations
• Harden CI/CD pipelines (GitLab) and secure the software delivery process
• Configure and operate corporate security tooling including endpoint protection, MDM/Jamf, DLP, and identity management
• Respond to security incidents: triage, investigate, contain, and remediate
• Conduct security assessments of infrastructure and applications
• Automate security operations including detection, alerting, and response
• Work with Infrastructure to embed security into cloud provisioning and system configuration

What you bring

• 8+ years of hands-on experience in security engineering or security operations
• Strong, opinionated experience designing and implementing identity and access management across cloud environments
• Strong working knowledge of cloud security controls across multiple providers, with AWS and Azure experience preferred
• Experience securing CI/CD platforms, with GitLab preferred
• Familiarity with corporate IT security tooling such as Jamf, endpoint protection, DLP, and SSO/IdP
• Comfort working in Linux environments and scripting with languages such as Python or Bash

Nice to have

• Experience with infrastructure-as-code tools such as Terraform or Pulumi
• Exposure to financial services, crypto, or other regulated environments

What we offer

• Direct ownership of security implementation with immediate impact
• A small, technical team
• Exposure to low-latency trading infrastructure and the digital asset space
• Remote work (UK/Euro)

About Auros

Auros is a global digital asset liquidity provider operating 24/7 across centralised and decentralised markets. The company runs high-availability, low-latency systems where resilience and risk discipline matter, with security treated as a core engineering and risk function.