🎯 招聘雷达

📚 学习点

• K8s: CKA 认证
• 40h → 简历可写「Kubernetes 生产排障」
• AWS Security: AWS Security Specialty
• 60h → 简历可写「AWS 安全基线+合规自动化」
• AZ-500: AZ-500
• 60h → 简历可写「Azure 安全中心+Sentinel」
• DevSecOps: SAST/DAST 入流水线
• 60h → 简历可写「把安全工具链接进 CI/CD」
• 应急响应: DFIR 实战 50h → 简历可写「应急响应流程+取证」
• Python: 已有基础
• 查漏 → 简历可写「Python 工程化」

📄 原文

Who are we? Smarkets: Predicting the Future of Betting Smarkets is a prediction market exchange for sports and political trading, having handled over $50 billion in volume since 2010. We're upending sports betting with the fairest prices, the best technology, and a superior customer experience, powered by attracting great people and building a high-performance environment where they thrive. We're looking for an atypical candidate with strong regulated-business experience to support our growing CFTC business. The Team Security sits within Infrastructure and Engineering, protecting the distributed, real-time systems behind our trading engine. The team's remit spans our core products and our DCM/DCO entities, with a real regulatory dimension to the work, particularly around our CFTC-regulated business units. Alongside that regulatory scope, the focus is squarely on hands-on engineering: designing, building, and shipping the security tooling and controls that let engineering teams move fast safely. About the Role: This is a founding build. You'll stand up security engineering from the ground up through go-live and mature it as we scale, working within Infrastructure and Engineering teams to build the controls, automation, and guardrails our trading systems and regulated entities need. What you will do: Build the Foundations: Be part of a founding build, standing up security engineering from the ground up through go-live and maturing it as we scale, working within Infrastructure and Engineering teams. Design Guardrails: Design, build, and deploy security controls and guardrails across cloud-native platforms, including AI security solutions protecting customer-facing and internal products. Automate as Code: Automate security processes as code, embedding compliance and infrastructure-as-code checks into CI/CD pipelines without slowing down frequent shipping. Assess & Remediate: Conduct risk audits and assessments, translating findings into practical recommendations for engineering teams, and be hands-on in implementing those recommendations. Monitor & Respond: Monitor and analyse system access logs, flag anomalies, and support incident response, containment, and post-incident root cause analysis. Plan for Resilience: Plan and test security backups and disaster recovery processes to keep the platform resilient. Maintain Compliance: Develop and maintain security policies, standards, and controls meeting DCM/DCO requirements, and maintain evidence and documentation to support regulatory examinations and audits. Partner Across Teams: Partner with business and engineering teams on solutions, translating technical work for product and engineering audiences. Champion Ownership: Build a culture of security ownership among engineers, acting as a security partner rather than a gatekeeper. Role Requirements: Security Engineering Background: Hands-on experience building security engineering/DevSecOps capabilities in a cloud-native, high-growth environment, ideally financial services or exchange infrastructure. Confident Communicator: Comfortable communicating security risk, controls and technical decisions verbally and in writing to external stakeholders such as auditors or regulators. Regulatory Familiarity: Familiarity with CFTC system safeguards expectations, including 17 C.F.R. § 38.1051 and § 39.18 or similar regulatory requirements. AppSec Foundations: Strong grasp of application security principles (OWASP Top 10, NIST) and secure SDLC practices. CI/CD & Tooling: Proficiency with CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, CircleCI) and security tools (Snyk, Aqua, Trivy, Checkov, Twistlock, Clair). Cloud & Container Security: Hands-on expertise securing AWS/Azure/GCP, Kubernetes, containers, and IaC. Compliance as Code: Working knowledge of infrastructure-as-code and compliance-as-code practices. Automation Proficiency: Proficiency in at least one of Python, Bash, or Go, with a track record of automating security processes. Nice-to-have: Demonstrated experience deploying AI security solutions, guardrails, and defences for AI systems used by customers; a personal interest in sports, exchanges, or trading; certifications such as DSOP, CKS, CISSP, CCSP, CSSLP, or an AWS/Azure/GCP Security Specialty; a track record of security automation at scale in Agile/Scrum environments; direct experience with regulators/examiners on technology and system safeguards; and familiarity with event contracts, prediction markets, or similar novel futures products under CFTC. Our Values Our values are at the heart of everything we do, guiding how we work, collaborate, and innovate. They reflect what we expect of ourselves and each other to deliver the best results, while fostering a positive, high-performing environment: Push to Win: We set ambitious goals and relentlessly pursue them, always striving for excellence. Make Others Better: We lift each other up, share knowledge, and celebrate team success over individual achievement. Give a Shit: We care deeply about our work, our users, and the impact we make. Be a Pro: We take ownership, act with integrity, and consistently deliver to a high standard. Bring the Energy: We bring positivity, curiosity, and enthusiasm to everything we do, inspiring those around us. Culture Fit: These values define how we succeed as a team. If this isn't you, this may not be the right place. We hire people who thrive in a fast-paced, collaborative, and ambitious environment. Perks & Benefits We offer a competitive salary and benefits package, alongside a dynamic, collaborative environment where your work truly makes an impact and your voice is heard. Our team is diverse, driven, and ambitious, united by a strong work ethic and a hunger to innovate and win. Our benefits are designed around Health, Wealth, and Development, supporting you both professionally and personally. These include: Stock Options: Vest over 4 years, your success is our success. Pension Scheme: Competitive plan via Aviva, with up to 6% matched contributions if you opt in. Health Insurance: Comprehensive coverage to keep you and your family healthy. Enhanced Parental Leave: Enhanced maternity and paternity leave to support you through life's most important moments. Stay Fuelled: Enjoy fresh, chef-made breakfast and lunch every day, plus a constant supply of fruit, snacks, tea, coffee and soft drinks, because great work starts with great food. Cycle-to-Work Scheme: Support for sustainable commuting and staying active. Learning & Development: £1,000 annual education budget for courses, conferences, books, or training. Holiday: 25 days paid leave plus bank holidays, with the option to carry over 5 days. Flexible Working: Hybrid model with 3 days in the office and 2 days from home to fit your lifestyle. Global Working: Work from anywhere in the world for up to 20 days a year. Team Energy: Regular socials, hackathons, and events, because collaboration and fun go hand-in-hand. What happens next CV application review: We will review it as quickly as possible. Let's chat: A quick chat with our team about your experience and the role. Competency Interview: Virtual with the Hiring Manager. In-Office Interview: Meet the wider team. Diversity & Inclusion We're an equal opportunities employer and celebrate diversity in all its forms. If you need any adjustments during the recruitment process, please let us know; we're happy to accommodate your needs. Smarkets is an Equal Opportunity Employer, committed to equality, inclusion, and a welcoming environment for all. Find Jobs in United Kingdom on Arbeitnow

🇨🇳 全文翻译

我们是谁？Smarkets：预测博彩的未来 Smarkets是一个面向体育和政治交易的预测市场交易所，自2010年以来已处理超过500亿美元的交易量。我们正以最公平的价格、最优秀的技术和卓越的客户体验颠覆体育博彩，这一切得益于吸引优秀人才并打造一个让他们茁壮成长的高绩效环境。我们正在寻找一位具有丰富受监管业务经验的非典型候选人，以支持我们不断增长的CFTC业务。团队 安全团队隶属于基础设施与工程部门，负责保护我们交易引擎背后的分布式实时系统。该团队的职责范围涵盖我们的核心产品以及我们的DCM/DCO实体，工作具有真正的监管维度，尤其是围绕我们受CFTC监管的业务部门。除了监管范围之外，重点完全放在动手工程上：设计、构建和交付安全工具与控制措施，让工程团队能够安全地快速推进。关于该职位：这是一次从零开始的构建。你将从头开始建立安全工程，贯穿上线全过程，并随着我们的扩展使其成熟，在基础设施与工程团队中工作，构建我们的交易系统和受监管实体所需的控制措施、自动化和护栏。你将做什么：构建基础：参与从零开始的构建，从头建立安全工程，贯穿上线全过程，并随着我们的扩展使其成熟，在基础设施与工程团队中工作。设计护栏：在云原生平台上设计、构建和部署安全控制措施和护栏，包括保护面向客户和内部产品的AI安全解决方案。以代码方式自动化：将安全流程以代码方式自动化，将合规和基础设施即代码检查嵌入CI/CD流水线，同时不拖慢频繁交付。评估与修复：开展风险审计和评估，将发现转化为面向工程团队的切实建议，并亲自动手实施这些建议。监控与响应：监控和分析系统访问日志，标记异常，并支持事件响应、遏制和事后根因分析。规划韧性：规划和测试安全备份与灾难恢复流程，以保持平台的韧性。维护合规：制定和维护满足DCM/DCO要求的安全政策、标准和控制措施，并维护证据和文档以支持监管检查和审计。跨团队协作：与业务和工程团队合作制定解决方案，为产品和工程受众转化技术工作。倡导主人翁意识：在工程师中建立安全主人翁文化，作为安全合作伙伴而非守门人。职位要求：安全工程背景：在云原生、高增长环境中构建安全工程/DevSecOps能力的动手经验，最好是金融服务或交易所基础设施领域。自信的沟通者：能够自如地以口头和书面形式向审计师或监管机构等外部利益相关者传达安全风险、控制措施和技术决策。监管熟悉度：熟悉CFTC系统保障预期，包括17 C.F.R. § 38.1051和§ 39.18或类似监管要求。应用安全基础：深入掌握应用安全原则（OWASP Top 10、NIST）和安全SDLC实践。CI/CD与工具：熟练使用CI/CD工具（GitHub Actions、GitLab CI、Jenkins、Azure DevOps、CircleCI）和安全工具（Snyk、Aqua、Trivy、Checkov、Twistlock、Clair）。云与容器安全：在保护AWS/Azure/GCP、Kubernetes、容器和IaC方面具有动手专业知识。合规即代码：具备基础设施即代码和合规即代码实践的工作知识。自动化能力：精通Python、Bash或Go中至少一种，并具有自动化安全流程的过往记录。加分项：具有为客户使用的AI系统部署AI安全解决方案、护栏和防御的证明经验；对体育、交易所或交易有个人兴趣；持有DSOP、CKS、CISSP、CCSP、CSSLP或AWS/Azure/GCP Security Specialty等认证；在敏捷/Scrum环境中大规模安全自动化的过往记录；在技术和系统保障方面与监管机构/检查员有直接经验；以及熟悉CFTC下的事件合约、预测市场或类似新型期货产品。我们的价值观 我们的价值观是我们一切工作的核心，指导我们如何工作、协作和创新。它们反映了我们对自己和彼此的期望，以交付最佳成果，同时培育积极、高绩效的环境：奋力取胜：我们设定雄心勃勃的目标并坚持不懈地追求，始终力求卓越。成就他人：我们相互扶持，分享知识，庆祝团队成功而非个人成就。真心在乎：我们深切关心我们的工作、我们的用户以及我们所产生的影响。做专业人士：我们承担责任，以诚信行事，并始终如一地交付高标准成果。带来能量：我们为所做的一切带来积极性、好奇心和热情，激励周围的人。文化契合：这些价值观定义了我们作为团队如何取得成功。如果这不是你，这可能不是合适的地方。我们聘用那些在快节奏、协作和雄心勃勃的环境中茁壮成长的人。福利与待遇 我们提供有竞争力的薪资和福利套餐，以及一个充满活力、协作的环境，你的工作真正产生影响，你的声音被倾听。我们的团队多元、有动力且雄心勃勃，以强烈的职业道德和对创新与胜利的渴望为纽带。我们的福利围绕健康、财富和发展设计，在职业和个人方面支持你。这些包括：股票期权：4年内归属，你的成功就是我们的成功。养老金计划：有竞争力

🔍 深度分析