Senior Security Engineer

About the Company:

Capi helps businesses in Africa pay their international suppliers. We’ve raised over $18m from Creandum, Y Combinator, General Catalyst, Firstminute, Janngo, Kima Ventures, and some great angels from Revolut, Checkout, Stripe, Onfido, and Remitly.

Capi was founded by Mitch Riley, Scott Liddle, and Tom Watson. Mitch and Scott were COO/CFO/GC and CRO/CMO at Taptap Send, a remittance unicorn, and have spent two decades between them working in emerging markets. Tom is a third-time founder having founded Hubble and P4SD.

Role Overview

As our first Security Engineer, you will have significant impact on shaping our security posture. This is a broad role focused on implementing and maintaining security measures across the whole organisation. Your approach should be one of pragmatism, ensuring we move fast while meeting regulations and protecting ourselves and our customers' sensitive financial data. You should seek to find solutions that strike a balance between the right level of security with the stage we’re at as a business and the risks we face, building our best practices over time.

Key Responsibilities

• Develop and deploy security controls across our infrastructure, applications, and data

• Champion and implement "shift-left" security practices within our development lifecycle

• Manage IT security operations, including device security and access management

• Document security standards and guidelines that align with industry standards and regulatory requirements

• Oversee data security compliance and privacy requirements

• Perform regular security assessments to identify vulnerabilities and ensure compliance

• Develop incident response plans and manage security incidents to minimise their impact

• Manage security training and raise security awareness across the organisation

• Stay ahead of emerging security threats and technologies to proactively address risks

Requirements

• Deep understanding of security principles, security technologies, risk assessment, common vulnerabilities, attack vectors and security best practices

• Fantastic people skills with excellent written and verbal communication for expressing security concepts and recommendations to both technical and non-technical audiences

• Experience in a fast-paced VC-backed tech startup or scale-up environment

• Understanding of best practices managing IT Security in a distributed environment

• Worked within a compliance framework such as SOC2, GDPR or an FCA license

• Language requirements: English

• Location: London

Nice to Haves

• Experience in Fintech

• Scripting or programming skills (e.g. JavaScript, Python, Bash)

Additional Information

• This is a full-time position with competitive salary, share options, and benefits

• This is a hybrid position, with 3 days a week in the office, and two days WFH; the office is near Old Street in London.

• Ideal Start date: May, 2025 (we are aware that a notice period may need to be fulfilled and can adjust accordingly)

Capi is an equal opportunity employer and welcomes candidates from diverse backgrounds.