Senior Security Engineer (London, Hybrid) at Asset Reality | GB | Rezi

Senior Security Engineer (London, Hybrid) at Asset Reality

Senior Security Engineer (London, Hybrid)

Asset Reality · GB

3 days ago

Senior Security Engineer (London, Hybrid)

Asset Reality · GB

3 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Asset Reality builds mission-critical infrastructure for law enforcement and government clients, operating in high-stakes environments where records are examined adversarially. This role involves shipping production code and ensuring it withstands adversarial scrutiny, embedding security as a core discipline within the engineering team.

Responsibilities

  • Contribute to day-to-day product development: designing, writing, reviewing, and shipping production code in Go and React.
  • Own the security dimension of engineering work: lead threat modelling, drive secure design decisions, and review high-risk changes.
  • Own and improve the security of our AWS estate: IAM design, network segmentation, secrets management, and data isolation.
  • Build security into the development lifecycle: dependency and vulnerability management, CI/CD security controls, static and dynamic analysis, and related tooling.
  • Design and build product security features: audit integrity, tamper evidence, access controls, and data isolation.
  • Lead the technical side of incident response: detection, investigation, remediation, and readiness exercises.
  • Support client-facing security work with technical depth: contribute to security questionnaires, due diligence responses, and client assessments.
  • Raise the security literacy of the wider team through design reviews, pairing, and pragmatic internal guidance.

Requirements

  • Five or more years as a software engineer, with substantial time spent in security-focused work.
  • Comfort being measured as an engineer first.
  • Strong backend development experience.
  • Demonstrable, hands-on ownership of cloud security in a production AWS environment.
  • Ability to reason about IAM design, network segmentation, secrets management, and data isolation in a multi-tenant system.
  • Threat modelling as a practised discipline.
  • Ability to run threat modelling with engineers who haven't done it before.
  • Practical experience with application security: identifying, exploiting, and fixing relevant vulnerabilities.
  • Comfort working in a small team where you will be the security depth, without a larger security function behind you.

Skills

  • Go
  • React
  • AWS
  • Postgres
  • IAM design
  • Network segmentation
  • Secrets management
  • Data isolation
  • Dependency management
  • Vulnerability management
  • CI/CD security
  • Static analysis
  • Dynamic analysis
  • Audit integrity
  • Tamper evidence
  • Access controls
  • Incident response
  • Security questionnaires
  • Due diligence
  • Client assessments
  • Threat modelling
  • Application security
  • Digital asset custody
  • Payments infrastructure
  • Finance
  • SOC 2 Type II
  • ISO 27001
  • Detection and response tooling
  • Schema design
  • Row-level security
  • Performance tuning

Location

  • London Office
  • Hybrid

Work Type

  • Hybrid (1–2 days on site)
  • Full-Time

Experience Level

  • Senior engineer
  • Five or more years of software engineering experience
  • Substantial time spent in security-focused work

Benefits

  • Competitive salary
  • Benefits
  • Commission
  • Equity

About the Company

  • Asset Reality provides the infrastructure needed to manage seized and operational assets end‑to‑end.
  • Our Platform combines a global system of record with government‑grade digital asset custody infrastructure, replacing fragmented legacy workflows across physical and digital asset lifecycles.
  • Trusted by agencies and regulated practitioners worldwide to handle more than 1,500 seizures and $1 billion in seized asset transactions.
  • Our Platform supports complex, high‑sensitivity, cross‑jurisdictional workflows with strict security, auditability, and compliance.
  • By standardising processes from seizure to disposal and sourcing to deployment, Asset Reality is the modern infrastructure layer underpinning asset recovery and criminal disruption, improving outcomes for victims and governments.
  • We are passionate about solving the challenges of asset recovery and want to grow our team with others who share that passion.
  • As an early-stage startup, we provide a unique opportunity for financial reward that goes beyond the monthly salary through equity.