Senior Staff Information Security Engineer

<p>We are seeking a Senior Staff Information Security Engineer to help shape and advance security across our hybrid technology estate.</p> <p>Our environment spans AWS and on-premises infrastructure hosted in colocation facilities. You will provide senior technical leadership across both environments, defining secure architecture patterns, building scalable controls, and partnering with Engineering, Product, SRE, and Infrastructure teams to reduce risk without creating unnecessary barriers to delivery.</p> <p>This is a senior individual-contributor role. You will remain hands-on while acting as a trusted technical authority for complex security architecture and engineering decisions. You will lead initiatives that cross teams and technologies, address systemic security challenges, and improve how security is designed and implemented across the organisation.</p> <p>The role is primarily remote, with occasional in-person responsibilities at our Bristol, UK office and, where necessary, our colocation facilities.</p> <p><br><strong>What you'll do:</strong></p> <h4>Lead Infrastructure Security Architecture</h4> <ul> <li>Define and evolve security architecture across AWS and our colocation estate.</li> <li>Establish secure reference architectures, engineering standards, and reusable control patterns.</li> <li>Provide technical leadership for major infrastructure, platform, and product initiatives.</li> <li>Identify systemic risks and lead practical, sustainable programmes to address them.</li> </ul> <h4>Strengthen Cloud and Hybrid Security</h4> <ul> <li>Design and improve security across cloud accounts, networks, identities, workloads, and shared services.</li> <li>Establish effective controls for identity and access management, segmentation, encryption, secrets, logging, monitoring, and workload protection.</li> <li>Develop preventative guardrails through infrastructure-as-code, policy-as-code, automation, and cloud-native security services.</li> <li>Improve consistency across the enterprise including cloud, on-premises infrastructure, and the connectivity between them.</li> </ul> <h4>Partner with Engineering and Product</h4> <ul> <li>Engage early in the design of new products, platforms, services, and integrations.</li> <li>Lead threat modelling, security architecture reviews, and technical risk assessments.</li> <li>Translate security risks into clear, practical engineering recommendations.</li> <li>Help teams adopt secure-by-design principles through reusable patterns, tooling, and documentation.</li> </ul> <h4>Build, Automate, and Apply AI</h4> <ul> <li>Design and implement security tooling, integrations, and automated controls.</li> <li>Embed security capabilities into infrastructure provisioning, engineering workflows, and CI/CD pipelines.</li> <li>Use AI-assisted tooling to improve scripting, detection development, alert analysis, vulnerability triage, threat modelling, and technical documentation.</li> <li>Validate AI-generated outputs and ensure AI tools are used with appropriate controls for confidentiality, accuracy, access, and human oversight.</li> </ul> <h4>Improve Risk Reduction and Resilience</h4> <ul> <li>Provide technical direction for vulnerability and exposure management across AWS and on-premises infrastructure.</li> <li>Identify recurring patterns across incidents, penetration tests, vulnerabilities, and control assessments.</li> <li>Act as a senior technical escalation point during significant security incidents.</li> <li>Ensure investigations and lessons learned result in durable architectural and engineering improvements.</li> </ul> <h4>Provide Senior Technical Leadership</h4> <ul> <li>Lead complex security initiatives spanning multiple teams and planning cycles.</li> <li>Mentor security engineers and provide guidance to engineers in adjacent teams.</li> <li>Raise the standard of security architecture, automation, documentation, and technical decision-making.</li> <li>Communicate security risks and recommendations clearly to technical teams, product leaders, and senior stakeholders.</li> </ul> <p><strong>What you'll bring:<br></strong></p> <ul> <li>Significant experience in security engineering, infrastructure security, cloud security, security architecture, or platform engineering.</li> <li>Deep, hands-on experience securing AWS environments.</li> <li>Strong knowledge of AWS identity and access management, network architecture, account governance, encryption, logging, monitoring, secrets management, and workload protection.</li> <li>Experience designing or securing on-premises, data-centre, or colocation-hosted infrastructure.</li> <li>Strong knowledge of enterprise networking, segmentation, firewalls, secure remote access, privileged administration, and hybrid connectivity.</li> <li>Experience with infrastructure-as-code, CI/CD security, containerised environments, and cloud-native platforms.</li> <li>Demonstrated experience designing and implementing automated security controls and engineering solutions.</li> <li>Proficiency with scripting or software development using Python, Go, or a comparable language.</li> <li>Practical experience using AI-assisted tooling to improve security engineering and operational workflows.</li> <li>Experience leading complex initiatives across multiple engineering, infrastructure, or product teams.</li> <li>Strong knowledge of security architecture, threat modelling, vulnerability management, detection, and incident response.</li> <li>The ability to operate independently, navigate ambiguity, and influence decisions across technical and leadership audiences.</li> </ul> <p><strong>Desirable experience:&nbsp;</strong></p> <ul> <li>An advanced AWS certification in security, architecture, networking, or cloud engineering.</li> <li>Experience in fintech, payments, SaaS, or another regulated technology environment.</li> <li>Experience securing large or complex AWS multi-account estates.</li> <li>Experience with Kubernetes, container security, software supply-chain security, and policy-as-code.</li> <li>Experience with technologies such as CNAPP, CSPM, SIEM, EDR, DLP, WAF, vulnerability-management, network-security, or secrets-management platforms.</li> <li>Familiarity with PCI DSS, SOC 2, GDPR, NIST, or ISO 27001.</li> <li>Experience supporting significant security incidents, penetration tests, audits, or customer security assessments</li> </ul> <h4><strong>As well as being a part of something exciting everyday, you will also receive the following benefits:</strong></h4> <ul> <li>Competitive salary + bonus&nbsp;</li> <li>A remote first culture!</li> <li>Flex PTO&nbsp;</li> <li>Health, Dental and Vision Insurance</li> <li>13 Paid Holidays</li> <li>Company volunteer days</li> </ul> <p><strong>What we do!</strong></p> <p>NMI enables our partners with choice, and challenges the one-size-fits-all approach to payments. You've probably used NMI in the last 24 hours without even realizing it. We’re the platform that powers success for innovative tech c