Senior DevSecOps Engineer, Italy

�

� Description

• • Shape the future of secure cloud at ION: join a global team that safeguards the platforms used by 40 % of the world’s largest companies. As a Senior DevSecOps Engineer you will co-own the security posture of our multi-cloud estate (AWS, Azure, GCP) and influence every design decision that keeps billions of dollars of daily trading volume safe.
• • Architect and harden cloud foundations: partner with platform squads to design landing zones, network segmentation, IAM boundaries, key-management hierarchies and policy-as-code that scale across regions and regulatory jurisdictions. Your blueprints will become the reference standard for new business units onboarding to ION Cloud.
• • Modernise legacy workloads securely: lead threat-modelling sessions with application teams, map attack surfaces, and craft migration roadmaps that turn monoliths into cloud-native microservices without ever dropping a security control. You will personally shepherd the most critical portfolios from on-prem to containers, serverless or PaaS while embedding SSDLC guardrails.
• • Automate everything security: build CI/CD pipelines that weave SCA, SAST, DAST, IAST and RASP into every pull request. Create self-service Terraform modules and Helm charts that bake encryption in transit & at rest, mutual-TLS, secrets rotation and runtime monitoring into every deployment artefact—so developers can ship faster and auditors stay happy.
• • Continuously benchmark and evolve: run proof-of-concepts with bleeding-edge tools (Aqua, Twistlock, Prisma, Netskope, AWS Security Hub, Azure Security Center, GCP SCC) and feed the results back into our security architecture guild. Publish internal advisories, run brown-bag demos and mentor junior engineers to raise the bar across the entire engineering population.
• • Stay ahead of adversaries: orchestrate red-team/blue-team exercises, interpret penetration-test findings, triage vulnerability scans and translate technical risk into business language for executives. You will own the remediation backlog and drive it to zero with ruthless prioritisation and automation.
• • Collaborate without borders: work with distributed squads in London, Milan, Pisa and Collecchio, plus external security SMEs, auditors and regulators. Champion a culture where security is a shared responsibility and every engineer has the tools and knowledge to write secure code from day one.
• • Own the compliance story: map controls to ISO 27001, PCI DSS, SOC 2 and emerging MIL-SPEC requirements. Build evidence pipelines that make audits a non-event and give leadership real-time dashboards on risk exposure and remediation velocity.
• • Influence product strategy: sit at the intersection of engineering, security and business to ensure that new features are secure-by-design. Your insights will directly shape the roadmap for ION’s next-generation trading and analytics platforms.