About Flowdesk
At Flowdesk, we are building the infrastructure powering the next era of global finance. As a full-service digital asset trading and technology firm, we provide liquidity solutions, OTC trading, and market infrastructure that connect digital assets to global markets with institutional-grade precision, transparency, and scale. Flowdesk combines expertise from traditional finance, algorithmic trading, and blockchain technology to deliver always-on trading capabilities across the digital asset ecosystem. Founded in 2020, we have grown into a global team supporting institutions, exchanges, and token issuers worldwide as the financial system evolves toward tokenized markets.
Responsibilities
•Design, run and tune cloud-native, virtual and on-premises firewalls, including rule hygiene and change review
•Run security architecture reviews for new services, integrations and offices, and write up findings with clear, prioritised fixes
•Plan network segmentation across cloud and office environments, so sensitive systems are isolated from everything else
•Review cloud infrastructure architecture and help design and support a best practice secure cloud infrastructure
•Own our SASE and zero-trust access approach
•Manage the security of network devices, including configuration baselines, patching, access, lifecycle and routing protocols
•Build and change network security controls through Terraform and infrastructure as code, using the same review and approval process as our engineering teams
•Work across security and engineering teams on network changes, so security is part of the design and not added afterwards
•Monitor network telemetry with SecOps, and help investigate and contain incidents
•Produce evidence for audits and regulators, and help close findings from pentests and cloud posture management reviews
•Set standards and reference architectures for network controls, and keep them current
•Work as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload
Requirements
•Several years in network or cloud security engineering, with hands-on production experience
•Working knowledge of both cloud and on-premises networks: private networks, routing, peering, private connectivity, DNS, low latency networks, load balancing, egress control, switching and wireless
•Experience managing network devices securely
•Hands-on experience with cloud and next-generation firewalls, and with SASE or ZTNA platforms
•Solid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way
•Scripting skills (required for the role)
•General security knowledge across the main domains, including mTLS, IPsec, WireGuard, SSL inspection, IDPS, and network monitoring and detection
•A process-oriented approach: you document what you do, follow change control, and leave an audit trail
•Experience reviewing architectures and explaining risk to engineers and non-technical stakeholders
•Willingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed
•Security-by-design mindset: engages early in network and architecture changes rather than reviewing at the end
•Clear communicator, able to explain risk to engineers and non-technical stakeholders
•Process-oriented: documents decisions, follows change control and leaves a clear audit trail
•Automation-minded: prefers infrastructure as code and scripting over manual change
•Comfortable working across the security team and stepping in on adjacent areas when needed
Nice to have
•Experience working in a regulated, controlled environment, such as financial services or crypto
•Container and Kubernetes network policy and service mesh experience
•Relevant security or cloud networking certifications
Benefits
•International environment (English is the main language)
•100% health coverage
•Team events and offsites
•Company Pension scheme
•Learning and Development budget
