Return to jobs
Join the groundbreaking Marshmallow team reshaping international migration through innovation in FinTech
Overview
Salary
No salary declared 😔
Location
London, UK - Hybrid
Nomad Friendly?
Expires
Expires at anytime
Visa
Visa sponsor
About Marshmallow
At Marshmallow, our mission is to make migration effortless. Our dynamic and innovative thinkers work hand-in-hand to build essential solutions for a significant systemic issue. By joining Marshmallow, you will partake in ever-evolving professional growth and contribute to our change-driving operations.
Role Summary
- Join the InfoSec team in a role that spans application, cloud, and corporate security
- Operate security controls, respond to security alerts, and improve processes
- Collaborate with various teams to maintain Marshmallow's security posture as we grow
Role Requirements
- Experience in an information security role within a cloud-based company (essential)
- Understanding of cloud security (AWS preferred) and secure development practices
- Experience with security tooling (SIEM, MDM/endpoint security, DLP)
- Familiarity with endpoint, identity, corporate security controls, and standards like ISO 27001, NIST, CIS Controls (beneficial)
Application Process Details
- Initial call
- Past-Experience Interview
- Skill-Based/Technical Interview
- Culture Interview
Background checks are conducted as part of the application process. Join our team and enjoy benefits such as hybrid working; a competitive bonus scheme, 25-day holiday (+ bank holidays), and ample learning and development opportunities.
About Marshmallow: We exist to make migration easy. A systemic problem of this magnitude requires a team of curious thinkers who relentlessly pursue solutions. Those who constantly challenge the why, dismantle assumptions, and always take action to build a better way. A Marshmallow career is built on a cycle of continuous growth, with learning at its core. You will be challenged to raise the bar on your capabilities and supported with the right tools and guidance to do so. This ensures you can deliver impactful work and drive change. If life at Marshmallow sounds like it could be for you, explore our Culture Handbook to find out more. Move our mission, and your career, forward.
The role: You will join the InfoSec team, reporting to the Head of InfoSec & TechOps. The team operates across product engineering, cloud infrastructure, corporate IT, and other business teams to support Marshmallow’s security posture in a regulated fintech environment. This role is execution focused and operational in nature. It covers application, cloud, and corporate security, with responsibility for operating security controls, responding to security alerts, improving processes, and working directly with teams to maintain an appropriate risk posture as Marshmallow scales.
Job requirements: Experience working in an information security role within a cloud-based organisation is essential. A practical understanding of cloud security concepts (AWS preferred), working knowledge of secure development practices and DevSecOps principles, exposure to both technical and operational security domains, and hands-on experience operating or supporting security tooling (SIEM, MDM/endpoint security, DLP, or similar) are required. Familiarity with endpoint, identity, and corporate security controls, as well as a solid understanding of network and application-level security fundamentals, are also necessary. Familiarity with security frameworks and standards such as ISO 27001, NIST, and CIS Controls is beneficial.
Benefits: Hybrid working, competitive bonus scheme, flexible benefits budget, sabbatical leave, work from anywhere options, mental wellbeing support, learning and development opportunities, private health care, medical cash plan, tech scheme, and more. Enjoy 25 days holiday (+ bank holidays), pension, cycle to work scheme, monthly team socials, and company-wide socials every month!
Applications details: The hiring process includes an initial call, a past-experience interview, a skill-based/technical interview, and a culture interview. Background checks will be conducted as part of our commitment to maintaining a safe and trustworthy environment.
