Job Overview
About Trade LedgerTrade Ledger is transforming the financial services industry with our cutting-edge lending platform. Our technology helps banks and alternative finance providers unlock economic growth through better support for business customers. We’re pioneering the future of product engineering, where technical expertise meets innovation to solve complex challenges in ways that weren’t previously possible.Trade Ledger has won numerous innovation awards and is rated among the top fintech start-ups in Asia Pacific. We’ve already secured international banks and smaller financial institutions as customers, and we’re just getting started.
The RoleWe are seeking a Senior Security Engineer to join our journey, combining deep engineering expertise with specialized security knowledge. In this unique hybrid role, you’ll split your time between forward-thinking product engineering and embedding security throughout our development lifecycle.You’ll architect robust solutions that address complex technical challenges while ensuring our platform remains secure by design.
Key Responsibilities
Security (50%)”Shift left” – Embed security early in the development lifecycle by assessing potential threats during the design phaseDesign and implement an agile threat modeling approach to defend our applicationsSet up testing and monitoring to build out our threat detection capabilityChampion security best practices and standards across development teamsDesign, implement, and improve authentication and authorization mechanismsPerform security assessments and assist with security investigationsManage the SAST, DAST, and SCA tools in our CI/CD pipelineArticulate security risks pragmatically to both technical and non-technical stakeholdersLeverage AI and automation
Engineering (50%)Architect solutions that seamlessly integrate across our entire technical ecosystemDesign elegant, scalable APIs and system architecturesApply deep technical knowledge across multiple domains and technology stacksMake sophisticated architectural decisions that balance immediate needs with long-term visionAdopt a systems-thinking approach to problem-solving
Required Skills & Experience5+ years of software engineering experience with demonstrated ability to adapt across different technology stacksThorough understanding of security frameworks (e.g., STRIDE, DREAD, PASTA, OWASP)Experience implementing and running security testing (SAST, DAST, SCA)Strong foundation in software architecture principlesProficiency in PythonProficiency in Java/Spring ecosystem with the ability to quickly adapt to new frameworksKnowledge of PostgreSQL, and JavaScript/TypeScriptStrong knowledge of containerization, orchestration, and cloud deployment (Azure preferred)Hands-on experience with logging, monitoring, and alerting solutionsProven ability to balance technical debt against delivery prioritiesStrong testing mindset with experience in automated testing approachesExcellent problem-solving skills with the ability to navigate ambiguity
Preferred QualificationsOffensive Security (ethical hacking, pentest) and/or Defensive Security (Blue Team, SOC) experienceFamiliarity with API specification tools like TypeSpec or OpenAPIExperience in the financial services sectorUnderstanding of ISO27001 technical controls in an agile environmentTrack record of mentoring other engineers in systems thinking and security practicesContributions to open-source projects or technical communitiesExperience using AI tools
About YouYou’re a developer who sees security as an integral part of quality codeYou have an attacker mindset with a natural lateral thinking approachYou’re critical in assessing the effectiveness of architecture designs and implementationYou can manage competing deadlines and prioritize responsibilitiesYou have an incredible appetite to learn and adaptYou thrive in collaborative environments but can also work independently
What We OfferCollaborative team culture that values innovative thinking and technical excellenceComplex, meaningful problems to solve that will transform business lending globallyCompetitive salary and benefits packageRemote-friendly work environment with flexible hoursProfessional development opportunities and learning culture
CultureA diverse, open team culture is our differentiator! We want you to be passionate, team-focused, hardworking, and love what you do, because we know that our people are the creators of our success.Our interview panels are inclusive to ensure we do not discriminate against age, gender, sexual identity or preference, or religion. Bring your authentic self and let’s achieve awesome things together!
LocationHybrid/Remote Europe/UK Company logo: https://media.licdn.com/dms/image/v2/D560BAQHHSLItnYjK1g/company-logo_400_400/company-logo_400_400/0/1689651238543/dataannotationtech_logo?e=1755129600&v=beta&t=AOAG9ZhtjaWoaZEVGCjdQM0i1ps7_JTfn0xorJQDky0