Head of DevSecOps

About the Role

As Head of DevSecOps, you'll own the security, reliability and delivery of the platform that Tier 1 and Tier 2 banks build their products on. Sitting in our Engineering team and reporting to the CTO, you'll lead our DevOps engineers (a team of 4) and set the direction for how we build, ship and secure our infrastructure, with security built into every stage of the software lifecycle rather than added at the end. You'll also be a trusted voice for our banking clients, helping them feel confident in how we protect their data and keep the platform running. As we expand into new markets, the role will grow to cover a larger team and a broader security and resilience remit.

This is an office-based role, with regular in-person collaboration in the office.

What You'll Do

• Lead, support and develop the DevOps team, creating an environment where engineers can do their best work and grow their skills.
• Own the DevOps strategy and roadmap, embedding security controls such as code and dependency scanning, container scanning and secrets management into our CI/CD pipelines.
• Set the direction for our cloud infrastructure and infrastructure as code, keeping the platform secure, scalable and cost-effective.
• Oversee platform reliability, including observability, incident response, on-call, disaster recovery and business continuity testing.
• Lead our security certification and compliance work (e.g. ISO 27001, SOC 2, PCI DSS) and help us meet the operational resilience expectations of our regulated clients.
• Act as the technical security point of contact for clients and partners, handling due-diligence questionnaires, audits and penetration test findings.
• Work with Engineering, Product and IT to manage vulnerabilities, access and risk, and build a security-aware culture across the business.
• Keep the CTO and leadership team informed on security posture, risk and platform health.

Qualifications

• 7-15 years of experience in DevOps, platform or security engineering, including time leading or managing an engineering team.
• Hands-on experience with at least one major cloud platform (AWS, Azure or GCP), infrastructure as code (e.g. Terraform) and containers/Kubernetes.
• A track record of building security into CI/CD pipelines and the wider software delivery lifecycle.
• Experience working to security or compliance frameworks such as ISO 27001, SOC 2 or PCI DSS.
• The ability to explain technical risk clearly to non-technical colleagues, clients and auditors.
• Confident, everyday use of AI tools in your work, such as Claude, Claude Code or GitHub Copilot.

• Experience in FS, fintech or another regulated environment, particularly working with banks.
• Familiarity with financial-sector resilience regulation such as DORA or the FCA operational resilience rules.
• Security certifications such as CISSP, CISM or a cloud security certification.
• Experience with policy-as-code, zero-trust architecture or cloud security posture management tools.
• Experience scaling a team and its infrastructure through a period of fast company growth.

Using AI at Hyperlayer

Hyperlayer is hyper-focused on making the most of AI across every workstream, and DevSecOps is no exception. In this role, you'll use AI coding assistants such as Claude Code to speed up infrastructure-as-code and pipeline work, and AI tools to help triage vulnerability findings, summarise incident timelines and draft responses to client security questionnaires. You'll also help shape how we use AI safely across Engineering, setting sensible guardrails for tooling, data and access.

Working at Hyperlayer

We value our team and are proud to offer some great benefits:

•         A performance-based employee bonus scheme.

•         25 days annual leave plus bank holidays, a day off on your birthday, and an additional day per year of tenure to a maximum of 30.

•         Critical illness and life insurance cover.

•         AXA PPP Health Insurance, including gym offers.

•         Cycle-to-work scheme.

•         Referral bonus scheme.

•         Workplace nursery scheme.

How to apply

Please click on the 'Apply' button, you will be asked to provide an updated CV and answer some questions. For further information about this vacancy, you can contact us at people@hyperlayer.com.

Applicants must have the right to work in the UK. We are unable to offer visa sponsorship for this role unless stated otherwise.

Equity, diversity, and inclusion

Hyperlayer's mission is to make a positive impact on people's lives, making it easier for everyone to manage their money.

Hyperlayer's commitment to equity, diversity, and inclusion is a key part of this; it helps us better serve our customers, employees, and business partners from every background.

We are constantly learning and striving to do better, and we expect all staff to actively take part in this process.

Data Privacy

As part of our recruitment process, Hyperlayer collects and processes personal data relating to job applicants.

We are committed to being transparent about how we collect and use this data and to meeting our data protection obligations. To read more click here.