DevSecOps Lead Engineer

About Wayflyer

Our mission is to give the world access to the best products by empowering great brands to reach their growth potential.

Today's consumer brands need a capital provider that keeps pace with their growth ambitions. Traditional financing options are slow, cumbersome and often out of reach. That's why we built Wayflyer.

Our unique technology allows us to assess businesses in minutes, generate financing offers that reflect their growth potential and send funds in as little as 24 hours.

Since launching in April 2020, we've deployed over $4.5bn to thousands of brands worldwide, backed by Tier 1 banks like J.P. Morgan. We've become a trusted financing partner for some amazing brands, like True Classic, Little Words Project and Kekoa Foods.

Teams at Wayflyer are truly cross-functional. You'll be collaborating with ambitious colleagues from around the world - all striving to deliver on a huge opportunity. Check out this video to hear directly from them.

What you'll do

• Collaborate in the design and development of products and systems, balancing security best practices with customer experience and developer friction

• Design and implement proactive security measures through automated vulnerability detection and prevention pipelines early in the development lifecycle

• Lead threat hunting initiatives and conduct in-depth security investigations using advanced analytics

• Review code security using static analysis tools, focusing on high-confidence findings to identify and address vulnerabilities early in the development lifecycle without creating unnecessary developer friction

• Build and maintain automated security testing frameworks to catch security issues early

• Develop and implement real-time threat detection mechanisms using AWS security services

• Create automated incident response playbooks and security orchestration workflows

• Research and implement cutting-edge security tools and techniques for proactive defense

• Mentor development teams on secure coding practices and threat modeling

Knowledge, skills and experience

• Strong experience with Python and TypeScript ecosystems, and deep familiarity with GitHub's security features and workflows

• Proven track record implementing proactive security measures and vulnerability detection pipelines

• Deep understanding of AWS security services to develop real-time threat detection

• Hands-on experience with modern security tools and automated testing frameworks

• Strong background in CI/CD security and automated security testing

• Working knowledge of security compliance and frameworks

• Demonstrated ability to build and maintain security automation

• Experience leading security investigations and incident response

• Track record of successfully mentoring teams on security best practices

• Strong communicator who can effectively collaborate across teams

What is important to point out is that you can do most or all of the above mentioned and can point to your real experience doing it. You’ve probably done it at companies of different shapes, sizes and industries. Given what we do, experience in financial services, fintech and business-to-business organisations is particularly interesting to us.

On top of that, you’re amazing at prioritisation. You make sure you’re not spread too thin while also giving teams the support they need. You spend your time on the things that make a positive difference. You make balanced decisions between security needs and developer productivity, and communicate them clearly.

What you’re like as a person and how you treat people is a big deal for us. People love working with you. You’re helpful and generous with your time and knowledge. People love helping you back. People know where they stand with you.

You’re always looking to learn and grow, on a personal and professional level. And you’re always looking to help others learn and grow by sharing your own knowledge and experience.

You know why diversity, equality, inclusion and belonging matters, and speak up when we can do better.

What happens next

We’ll review every application we receive. If we’re interested in taking your application further, we will be in touch to find out more about you and what you’re looking for.

What perks and benefits do we offer?

• Work remotely abroad for up to 60 days a year

• Employee assistance programme

• Private healthcare, life and critical illness cover

• Pension plan

• Generous parental and adoptive leave policies

• Equity scheme - so you can share in our success!