Security Engineer

Who We Are.

Axi is a leading global provider of margin and deliverable Foreign Exchange, Contracts for Difference (CFDs), and Financial Spread betting. Our business has evolved into a world-class, multifaceted brokerage with offices in six regions. With heavy investment in the latest trading technology, Axi seeks to offer the most comprehensive end-to-end trading experience available, servicing traders of all levels from beginners to institutional-level clients.

Lets talk about the cool stuff you will do at Axi!

At Axi, we are building DevOps and Site Reliability Engineering Teams to deliver, maintain and operate our cutting technology products. Team members will have enacted product ownership roles but also be expected to have a breadth of skills to contribute to our overall technology delivery lifecycle.

This role will develop, maintain and implement security and control policies through automation and DevSecOps best practices. To work in close collaboration with technology teams through all areas of the development and operations to ensure that Axi, it s network, systems and data, is kept safe and secure from unauthorised access and nefarious actors.

The successful candidate will have a critical role in security technology selection, deployment and ongoing management for mission critical production services. As an engineer, for security implementation and management, you will also be the technical liaison for any recertification with external security auditors. This role requires excellent written and oral communication skills as you will be interfacing with Axi s management and internal functional teams at all levels.

Your EDGE Assignment/You Will

• Operate as a core member of the Technology team and the owner for our Security Framework across our network perimeter, internal access / endpoints, and data.
• Create Security Solution Patterns in order to execute repeatable, consistent deployment solutions
• Implement, configure, and upgrade cloud computer systems, servers, firewall, intrusion-detection and network infrastructure using security best practices and incorporating solutions to meet or exceed SOC2, ISO 27001, and other regulatory requirements.
• Review implementation of security controls and evaluate effectiveness, make recommendations for improvements and execute against those recommendations
• Research security trends and emerging technologies, identify our business and technical requirements, perform technical evaluation and support deployment of multi-regional security solutions.
• Develop a strategy for dealing with increasing number of audits, compliance checks and external assessment processes for internal/external auditors, i.e. ISO 27001
• Keep abreast of security incidents and act as primary control point during information security incidents
• Contribute to Continuous Integration and Continuous Deployment (CI/CD) solutions
• Contribute to automation of our code delivery pipeline with the goal of one click deployments, rollbacks, and parameterized builds, advising developers on best security practices.

Are you the one

• Expertise in Cloud Security, preferably MS Azure, understanding security standards and framework
• Expertise in Azure DevSecOps and CI/CD Pipeline Security
• Security configuration including TLS, Cert, SAST/DAST, Sonar, etc.
• Vulnerability Management lifecycle from assessment through to remediation
• Identity and Access Management, Privileged Identity Management
• Coding experience, knowledge of Terraform desirable.

Axis bag of delights

• Competitive and attractive compensation.
• Extensive learning opportunities, such as professional training and certifications and soft skills development.
• 18 annual leave days per year.
• 12 sick days leave per year.
• Public holidays as declared by local government.
• Maternity leave as per law.
• Health Insurance

Axis interview journey

• Talent Acquisition Interview (30 minutes)
• Culture Interview (30 minutes)
• Technical Interview (60 minutes)
• Hiring Manager Interview (30 minutes)

Please note that our organization works with recruitment agencies on a pre-approved basis only. A recruitment agency that wishes to submit candidate profiles or resumes for consideration must obtain prior written consent from our talent acquisition team. We do not accept unsolicited resumes from recruitment agencies, and we will not be responsible for any fees related to unsolicited resumes. Should we receive an unsolicited resume from a recruitment agency that does not have prior written consent, we will not be responsible for the payment of any fees related to the recruitment of the candidate represented in the unsolicited resume.

At Axi, we prioritise creating a workplace that upholds fairness and respect for all. We encourage every individual within our community to contribute towards a culture where everyone feels a sense of belonging and is treated with the dignity they deserve. We make all employment-related decisions whether in hiring, compensation, training, performance reviews, or termination based on merit and without bias, ensuring equal opportunities for everyone. We consciously work to identify and overcome any unconscious biases, with a commitment to fostering an inclusive environment where every employee and candidate feels genuinely welcomed and valued.