This role reports directly to the CTO of UST FinX. You will operate as one of the CTO's senior technical lieutenants — creating engineering leverage across the organization while remaining deeply hands-on. You will influence multiple pods, establish reusable standards, mentor technical leaders, challenge weak designs, and turn technical direction into production-quality execution.

This is neither a passive advisory role nor a traditional people-management role; your authority comes from technical credibility, judgment, and execution.

Working closely with the CTO, you will define standards, identify engineering gaps, raise delivery quality, and ensure architecture is reflected in real code, platforms, and operational behaviour — a force multiplier who executes, coaches others, and resets the technical bar across UST FinX.

Skills And Experience We Are Looking For

• 8+ years in software, security, cloud security, DevSecOps, or platform engineering (10–15 ideal), with production platform ownership.
• Strong software engineering background — able to read real application code, system design, CI/CD workflows, infrastructure automation, and runtime behaviour.
• Proven experience securing cloud-native platforms in production.
• Deep secure-SDLC knowledge: secure design and coding, threat modeling, automated testing, vulnerability and dependency management, release controls, and production readiness.
• Integrating SAST, DAST, and SCA into CI/CD in a practical, automated, developer-usable way.
• Container security: image scanning, base-image strategy, registry controls, remediation, runtime configuration, and secure workload deployment.
• Kubernetes security: cluster hardening, namespace isolation, RBAC, admission control, network policies, workload identity, pod security, secrets, ingress, and runtime protection.
• Policy-as-code (OPA, Gatekeeper, Kyverno, or equivalent). IAM, least privilege, zero trust, workload identity, service-to-service authentication, and identity-driven security models.
• Secrets management: secure storage, rotation, access control, pipeline integration, runtime injection, and governance. Securing SaaS integrations and platform architectures: identity, access, data protection, tenant boundaries, and auditability.
• CI/CD security automation: pipeline hardening, artifact integrity, dependency controls, environment promotion, deployment approvals, rollback safety, and supply-chain security.
• Production security: reliability, auditability, scalability, incident response, monitoring, ing, and remediation.
• Strong communication — explaining architecture, risks, and trade-offs to globally distributed teams.
• Mentoring and technical leadership that raises the standard of surrounding engineers without formal authority.
• Comfortable in a global, distributed organization with multiple pods, stakeholders, and time zones.

Preferred Qualifications

• AWS security: IAM, Organizations, networking, KMS, CloudTrail, GuardDuty, Security Hub, workload identity, private connectivity, and multi-account patterns.
• Amazon EKS or equivalent Kubernetes in production.
• IaC security: AWS CDK, Terraform, CloudFormation, static analysis, policy enforcement, and secure module design.
• GitOps security: repository controls, signed artifacts, environment promotion, drift detection, and deployment guardrails.
• Software supply-chain security: SBOMs, artifact signing, provenance, dependency controls, and build integrity.
• Observability and security monitoring: Prometheus, Grafana, CloudWatch, OpenTelemetry, SIEM, tracing, logging, and event correlation.
• API security: OAuth2/OIDC, mTLS, service mesh, gateway security, rate limiting, token validation, and service-to-service authorization.
• Financial services, banking, or regulated environments where auditability and operational control are critical.
• Building reusable security platforms, guardrails, templates, policy libraries, and paved-road patterns consumed by multiple teams.
• Living with the long-term consequences of architecture decisions — supporting, patching, auditing, scaling, migrating, and evolving secure platforms after adoption.

What We Believe

We’re proud to embrace the same values that have shaped UST since the beginning. Since day one, we’ve been building enduring relationships and a culture of integrity. And today, it's those same values that are inspiring us to encourage innovation from everyone, to champion diversity and inclusion, and to place people at the centre of everything we do.

Humility

We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity

Through business, we will better the lives of those less fortunate than ourselves.

Integrity

We honor our commitments and act with responsibility in all our relationships.

Equal Employment Opportunity Statement

UST is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

Skills

Application Security, Cloud Security, DevSecOps, Security Engineering, RBAC, SAST, CI/CD, DAST, Zero Trust, Threat Modeling, Policy as Code