--- title: 'Senior Security Engineer at Capital Markets Gateway' canonical: 'https://feeny.ai/job/senior-security-engineer-capital-markets-gateway-london-dens8z0cw8zx' type: 'job' last_seen: '2026-09-13' --- # Senior Security Engineer at Capital Markets Gateway - **Company:** Capital Markets Gateway - **Location:** London, United Kingdom - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-07-15 - **Last confirmed live:** 2026-09-13 - **Apply:** https://jobs.lever.co/cmgx/b8180873-dd55-474b-80da-01a22c820f38 ## Job description The Company Capital Markets Gateway LLC (CMG) is a capital markets-focused fintech transforming global equity capital markets (ECM) through data, technology, and connectivity. As the preferred source for ECM analytics and the first network connecting the buy-side and sell-side for ECM workflows, we are committed to reshaping how capital markets operate. Founded in 2017 by a team of ECM practitioners, CMG has completed three successful fundraising rounds and is backed by a group of the world’s most prestigious financial institutions. The CMG platform is currently relied upon by 25 investment banks and 135 asset managers representing over $40 trillion in AUM. For more information, please visit www.cmgx.io. ## The Role We are hiring a Senior Security Engineer to lead our security risk management and governance work. This is a senior individual-contributor role for someone who thrives on owning large, ambiguous initiatives end-to-end and turning them into shipped, operationalized programs. You will report directly to the CISO, own cross-program initiatives, and collaborate closely with senior leadership across the firm. The core of the role is hands-on security risk management, threat modeling, security risk assessments, and security design and architecture reviews, paired with the governance and process work that scales the program. You will partner on customer due-diligence and SOC 2 evidence and turn security controls into repeatable workflows that fit how the business already works. You will apply that lens across the full control landscape: cloud security, supply-chain and vulnerability management, endpoint and identity, detection and response, and AI security. CMG operates in a highly regulated, client-facing market, so scope and impact here are unusually large for the level. We value strong collaboration and a deep sense of ownership: you will be trusted to take initiatives and run with them, often without an established process or a big team behind you. The defining shift for the program is moving from reactive to proactive, and this role is central to it. This is a high-growth-potential role: we expect the right person to start as a senior individual-contributor and grow into broader leadership, including people's leadership, as the function scales. ## Responsibilities Security Risk Management - Lead threat modeling across products, infrastructure, and new initiatives, identifying and prioritizing risks, attack surfaces, and vulnerabilities. - Conduct security risk assessments and translate findings into pragmatic, risk-based remediation prioritized by impact and blast radius. - Run security design and architecture reviews, partnering with Engineering and DevOps to reduce risk through secure design and simplicity, not just added controls. Governance, Risk & Compliance - Partner on customer due-diligence (DDQ) and SOC 2 Type II evidence gathering, keeping compliance sustainable rather than fire-drilled. - Build repeatable security workflows that embed controls into existing engineering processes instead of creating parallel ones. - Develop and maintain clear, role-relevant security policies, standards, and procedures, and drive consensus without direct authority. Security Controls and Technical Program Execution - Understand and implement controls for supply-chain risk and vulnerability management, including CI/CD enforcement and dependency hygiene, and build vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS. - Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection. - Strengthen endpoint and identity controls across a global, remote workforce: least privilege, phishing-resistant MFA, and privileged access controls. - Support detection and response, partnering with our DFIR and MDR relationships and helping mature toward a proactive posture. - Address AI security risks (prompt injection, data poisoning, model and agent governance) and help keep AI controls ahead of adoption. Cross-functional Leadership and Program Ownership - Take ownership of large, loosely defined initiatives and drive them from problem framing to operationalized program. - Work closely with senior leadership across the firm, bringing structure to ambiguity and sequencing work against risk. - Surface risk early, challenge assumptions, and communicate clearly to both technical teams and senior stakeholders. ## Qualifications - Have 6+ years of hands-on security experience, with real depth in security risk management: threat modeling, risk assessments, and security design and architecture review. - Have run governance, risk, and compliance work in practice, including audit and customer due-diligence support (SOC 2 or similar), and made it operational rather than just documented. - Have thrived in a startup or other small, fast-paced environment, owning large, ambiguous initiatives end-to-end with little scaffolding and shipping them. - Have working breadth across the control landscape: cloud security, supply-chain and vulnerability management, endpoint and identity, and detection and response. - Are genuinely technical: comfortable in cloud environments Azure, CI/CD, Microsoft 365, and at least one scripting language (e.g. Python, Bash, PowerShell), so your controls hold up in engineering reality. - Lead with empathy and influence, and distill complex security concepts into clear, actionable guidance for technical and non-technical audiences alike. - Thrive navigating ambiguity and make sound, risk-based calls with incomplete information. - Work effectively in a remote-first setup: most of the team is remote, with a small London in-office presence, so you communicate crisply and operate well asynchronously. - Navigate an organization to get things done you know who to pull in for information or alignment, and you drive that alignment without formal authority. ## Nice to have - Have banking, fintech, or other regulated industry experience. - Use AI tooling fluently in your own day-to-day work and are eager to integrate it into security workflows as a force multiplier. - Have a bias toward automating repeatable security work — scripting, tooling, and process — to scale your impact. - Be familiar with AI and agentic security risks (prompt injection, data poisoning, model and agent governance). - Have experience mapping security frameworks (NIST CSF, ISO 27001, OWASP, NIST AI RMF). - Have hands-on exposure to detection and response, red-team, or pen-test work. - Have experience with our stack: Entra ID, GitHub Enterprise Cloud (GHAS, Actions, Dependabot), Sentinel, Zscaler, Intune, Vanta, and the Atlassian suite. - Hold relevant certifications (e.g. CISSP, CRISC, OSCP) — valued but not required. ## Our Values - We innovate with purpose - We focus on outcomes vs. output - We believe diverse and inclusive teams fuel innovation - We are humble yet candid - We do right by the customer ## What We Offer - Equity - Unlimited PTO (28 days including bank holidays + unlimited additional paid leave) - Comprehensive benefits program managed by Globalization Partners - Premium life and income protection - Top private medical and dental insurance - Employee Assistance Program (EAP) - Pension contributions - Hybrid work environment - Education reimbursement - Continuous learning opportunities - Employee referral bonus - Parental leave CMG embraces our ongoing commitment to building a culture reflecting the people, perspectives, and passions it represents. We will accept nothing less than equity, inclusion, and belonging for all. With the only constant in life being change, we will always listen, learn, and improve for the betterment of our teams, customers, and communities. CMG is proud to be an Equal Opportunity Employer. ## About Capital Markets Gateway ## Company Overview - **One-liner**: Capital Markets Gateway (CMG) provides workflow management and data intelligence solutions that connect buy-side and sell-side participants throughout the entire equity capital markets (ECM) offering process. - **Entity Type**: Private (latest Series C raised $30M in April 2025) - **Headquarters**: New York, New York, United States - **Founded**: 2015 - **Founders**: Greg Ingram (CEO & Co-Founder), Mike Wilcox (President, COO & Co-Founder) ## Core Business - **Primary industry**: Financial Services – Equity Capital Markets (ECM) technology and data - **Target customers**: B2B – Investment banks (sell side) and asset managers, hedge funds, long-only mutual funds (buy side) - **Mission or purpose statement**: To transform the equity capital markets by digitizing workflows, delivering real-time data intelligence, and enabling faster, better-informed decisions for ECM participants. ## Products & Services - **CMG DataLab™**: A real-time ECM market data and analytics platform covering IPOs, follow-ons, ABBs, blocks, rights offerings, converts, ATMs, PIPEs, and registered directs across 50+ regions, with 20+ years of historical data, 550+ data fields, and 100+ filters. Type: SaaS / data platform. - **CMG XC™**: A connected workflow application for book building, allocations, and straight-through processing (STP), integrating with trading/OMS platforms. Type: SaaS workflow platform. - **Data Feed / API**: GraphQL-based real-time feed for powering internal workflows. - **Excel Add-In**: Available via Microsoft AppSource for data analysis. - **Mobile App (DataLab)**: Real-time calendar and deal tracking for iOS. ## Market Standing - **Valuation/Market Cap**: Not disclosed - **Key Metric**: Total Funding of $69M (as of April 2025); Annual Revenue estimated at $35M (LinkedIn, 2025) - **Notable Investors/Partners**: StageDotO (lead investor in Series A and Series C), TD Securities (venture round, 2025), Franklin Templeton (early investor and participant). Key clients include nine of the world’s top ten asset managers and underwriters representing 70% of the U.S. ECM market. - **Growth Signals**: - 80 employees across 7 countries (US, Czechia, UK, Brazil, Mexico) - LinkedIn followers: 6,005 (monthly growth +0.8%) - Active hiring for Senior .NET Engineers, Platform Engineers, Site Reliability Engineers - Opened a Chicago office; workforce distributed globally ## Competitive Advantages - **First connected ECM platform** that bridges the buy side and sell side, creating network effects that increase value as more participants join. - **End-to-end integrated workflows** covering the entire ECM lifecycle from wall cross to trade processing, reducing manual processes and operational risk. - **Data moat** built on 20+ years of historical ECM data and real-time coverage across 50+ regions. - **Critical mass** with 25 investment banks and 135 asset managers representing over $40 trillion in AUM, making CMG the de facto industry standard for ECM workflow. ## Strategic Focus - Expanding data coverage globally (Latin America, EMEA, APAC) and adding new deal types (ABBs, rights offerings, convertible bonds). - Advancing straight-through processing (STP) and integration with trading/OMS platforms. - Enhancing workflow efficiency through client advisory board feedback and continuous product innovation. - Scaling the engineering team and building out the platform to serve a growing international client base. ## Why Work Here - **Culture**: Founded by former ECM practitioners who understand the industry’s pain points; described as a team of technologists and industry experts with a collaborative, mission-driven environment. - **Remote/Hybrid Policy**: Hybrid – roles listed in New York and London (e.g., Account Executive, Customer Success Manager, Engineering roles). - **Notable Perks / Engineering Culture**: - Modern tech stack (likely .NET, cloud infrastructure) with roles for Senior .NET Engineers, Platform Engineers, and Site Reliability Engineers. - Opportunity to work on a transformative platform that is reshaping a traditional financial market segment. - Strong mentorship and a flat, cross-functional team (many founding members still at the company). ## Sources 1. [cmgx.io](https://cmgx.io/) – Product overview and company description 2. [jobs.lever.co/cmgx](https://jobs.lever.co/cmgx) – Current open positions and location details 3. [cmgx.io/who-we-are/](https://cmgx.io/who-we-are/) – Leadership team and company mission 4. [linkedin.com/company/cmg-capital-markets-gateway](https://linkedin.com/company/cmg-capital-markets-gateway) – Financials, funding, employee count, and headcount distribution 5. [cmgx.io/building-cmg-our-journey-to-transform-the-equity-capital-markets/](https://www.cmgx.io/building-cmg-our-journey-to-transform-the-equity-capital-markets/) – Founding story, product evolution, and client milestones ## Other roles at Capital Markets Gateway - [Account Manager, Sell-Side](https://feeny.ai/job/account-manager-sell-side-capital-markets-gateway-new-york-z4hgvyydm0q9) — New York, NY - [DevOps Engineer](https://feeny.ai/job/devops-engineer-capital-markets-gateway-brno-vymdg10czxtz) — Brno, Czech Republic - [Frontend Engineer](https://feeny.ai/job/frontend-engineer-capital-markets-gateway-brno-2j5ajygv9xpm) — Brno, Czech Republic - [Account Executive, Sell-Side](https://feeny.ai/job/account-executive-sell-side-capital-markets-gateway-new-york-g2vkz511s2c2) — New York, NY - [Senior Frontend Engineer (Analytics Product Lead)](https://feeny.ai/job/senior-frontend-engineer-analytics-product-lead-capital-markets-gateway-canada-nhqsrr14nre8) — Canada - [Customer Success Manager](https://feeny.ai/job/customer-success-manager-capital-markets-gateway-new-york-tffeqkat0bp1) — New York, NY - [Sales Director, Buy-Side](https://feeny.ai/job/sales-director-buy-side-capital-markets-gateway-hong-kong-y1w6918e39n1) — Hong Kong, China - [Account Executive, Buy-Side](https://feeny.ai/job/account-executive-buy-side-capital-markets-gateway-new-york-byktqx5xc6w2) — New York, NY - [Site Reliability Engineer](https://feeny.ai/job/site-reliability-engineer-capital-markets-gateway-london-jvy6s1a8swfh) — London, United Kingdom - [Platform Engineer](https://feeny.ai/job/platform-engineer-capital-markets-gateway-london-eabgte4jxjvv) — London, United Kingdom