Product Security Manager at Deriv

Do you want the possibility to make an international career ?
Our client Deriv is recruiting talented managers who want to work in their offices abroad.
Why work at Deriv
Deriv Group is one of the largest brokers in the world, with over 1,200 team members and 20 global offices. In a journey spanning more than 22 years, we have designed and implemented proprietary trading products and services, growing our markets to over 2.5 million customers worldwide. Our mission has remained the same throughout: to make trading accessible to anyone, anywhere. Deriv Life and Deriv Careers illustrate our focus on client satisfaction, excellence, innovation, and, most importantly, integrity. Join us to experience the excitement of a fast-paced, collaborative environment where we challenge ourselves to push the boundaries of what's possible in the fintech industry.



Your role
An opportunity to lead a growing team empowered to continuously improve the security posture of Deriv and its customers. Work with your team to both identify potential threats and risks in our operating environment and also actively test our network, products, applications and Cloud infrastructure to ensure we are resilient to attacks.

As a Product Security Incident Response Team (PSIRT) manager at Deriv, you will have the opportunity to make a real impact on our company's success. You will have the chance to work on cutting-edge technologies and stay up-to-date with the latest security best practices. If you are technical, highly skilled and motivated with a passion for securing our organisation, apply for this role to take on a new challenge and make a real difference.



Your challenges

● Take the lead on response, prioritisation and management of security incidents, such as data breaches or cyber-attacks, immediately and effectively
● Build and operate SOC and SIEM tools to continuously monitor and improve our security posture and processes
● Continually analyse our risk and protect our products, applications, network and environments
● Take a proactive approach to security and create scenarios to regularly penetration test our systems
● Shape the future by developing a security strategy and roadmap in line with business needs and priorities with continuous improvement as a priority
● Utilise tools and strategies as appropriate to benefit the team and the organisation
● Continue to operate an effective vulnerability rewards program
● Collaborate with the wider security team to build a culture of security within the organisation and share ideas, tools, and processes
● Follow industry trends and best practices to improve security by staying up-to-date with evolving security threats



What you have

● Experience leading a product focussed security team of engineers, analysts and researchers, ideally globally
● Coordinate both blue and red team specialists, working together to achieve the highest security levels
● The ability to operate at a deep hands-on technical level (e.g. having worked as a product security researcher, engineer or similar previously)
● Confident in discussing all Public Cloud (AWS/GCP) features and aspects, address security concerns surrounding each, and provide preventive solutions for securing each component both individually and as a part of a complex setup
● Experience in scripting/coding (e.g. Perl, NodeJS, Javascript/Typescript)
● Demonstrable experience managing security incidents and co-ordinating rapid response procedures
● Experience with security standards such as ISO27001, SOC2, PCI-DSS
● University degree in computer science or a related field
● Strong understanding of software development, security, networks, operations principles and best practices
● Strong problem-solving skills
● Excellent spoken and written English communication skills