We are seeking a Head of Infrastructure & Cloud Security to lead and develop our security operations across cloud, network, identity, endpoint, and data domains. In this role, you will design and enforce security protocols in a hybrid environment, lead a team of security engineers, promote a cloud-first approach, and report on enterprise security metrics
Responsibilities
- Shape and oversee the infrastructure and cloud security strategy, reporting directly to the CISO
- Hire, lead, mentor, and develop security engineers and team leads
- Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
- Manage and lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
- Collaborate with Platform and SRE teams to manage cloud IAM and security-group guardrails
- Enhance and manage endpoint security across managed devices, including hardening and telemetry health
- Own data security and cryptography controls, including KMS, secrets management, PKI, and certificate lifecycle
- Track, analyze, and report enterprise security metrics
Requirements
- Proven experience in leading security engineers and managing teams
- Hands-on experience in cybersecurity engineering
- Strong experience in securing on-premises infrastructure in an enterprise environment
- Experience with any major cloud provider
- Proficiency in cloud and network security, including CSPM/CNAPP/CWPP tools, WAF, DNS security, and IaC scanning
- Experience with EDR/XDR and MDM solutions
- Understanding of identity and access management, including cloud IAM and security-group guardrails
- Experience with KMS, secrets management, PKI, and certificate management
- Ability to enforce security controls without hindering delivery for Platform/SRE/DevOps teams
Will be a plus
- Experience in building or maturing an infrastructure/cloud security function from an early stage
- Background in fintech, brokerage, trading platforms, payments, or regulated environments
- Knowledge of Kubernetes/container security and cloud-native architectures
- Exposure to SOC 2, ISO 27001, or DORA compliance frameworks
- Familiarity with security tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk
We offer
- 15 paid vacation days off year
- 10 paid sick leave per year
- Public holidays as per the company's approved Public holiday list
- Medical budget
- Opportunity to work remotely
- Professional educational budget
- Language learning budget
- Wellness budget (gym membership, sport gear and related expenses)
Proven experience leading security engineers, hands-on cybersecurity engineering, strong cloud and network security (CSPM/CNAPP/CWPP, WAF, DNS, IaC), EDR/XDR/MDM, IAM, KMS/PKI, and ability to enforce controls without hindering delivery.
Key Responsibilities
- leading security team
- defining security strategy
- managing cloud security
Skills & Tools
CSPM, CNAPP, CWPP, WAF, DNS, IaC, EDR, XDR, MDM, KMS, PKI, Wiz, Panorama, Elastic Defender, Entra, CyberArk
Job Details
- Category: Information Technology
- Seniority: Senior Level
- Commitment: Full Time
- Workplace: Remote — Europe
- Languages: English
Benefits
- Generous paid time off
- Tuition reimbursement
About JustMarkets
A global multi-asset broker providing a convenient and transparent trading environment for clients in over 160 countries. — Industry: Finance