SRE - Security & Compliance

What is Sylvera anyway? ‍👩‍👨🌳 Sylvera helps organisations make confident decisions in carbon and commodity markets. We independently assess the quality of carbon projects, track market pricing and supply signals, and provide geospatial and carbon intensity data — giving our clients the clarity they need to invest in real climate action. We're a team of 130+ scientists, engineers, and market experts based across London, New York, São Paulo, Singapore, and Tokyo. Our work spans market intelligence, geospatial analytics, multi-scale lidar research, and policy analysis. We partner with governments and policymakers to raise the bar for transparency and rigour across carbon markets. Backed by over $96 million from investors including Fidelity, Balderton Capital, Index Ventures, and Insight Partners, we're trusted by Fortune 500 companies, major financial institutions, and governments worldwide. If you care about climate, enjoy solving hard problems, and want to work with people who take the mission seriously — we'd love to hear from you. What will I be doing? ‍‍ 👩‍💻👨‍💻 We’re looking for a mission-driven Site Reliability Engineer to join the Apps & Platform team in Engineering. You'll bring security and compliance into how we build and run our AWS platform every day, not just at audit time, and you'll do it hands-on in the infrastructure. Specific responsibilities will include: Running the technical side of our ISO 27001 programme. You'll keep our controls passing in Drata, collect evidence from AWS, GitHub and our identity tools, and fix what fails yourself. Hardening and running our AWS estate with the platform team: IAM and SSO, networking and firewalling, encryption, secrets, backups and disaster recovery, all in Terraform. Owning vulnerability management across engineering. You'll triage findings from Aikido and our annual penetration test, and work with product teams to get them fixed. Making our systems observable and our incident response sharp: alerting in Datadog and Sentry, on-call, postmortems, and runbooks/skills people actually use. We’re looking for someone who: 🧠💚 Has run production infrastructure on AWS and writes Terraform comfortably Has hands-on experience with a security framework such as ISO 27001 or SOC 2: you've owned controls and produced the evidence Has sound security instincts and knows when a risk is worth accepting Has been on call, worked real incidents, and made things better afterwards Weighs cost and complexity, and picks the simplest thing that works at our scale Meets an unfamiliar problem with "I'll find out", whether it's a CIDR clash, a failing control or a vendor console you've never opened Ideally knows their way around Kubernetes (EKS), Linux and network debugging, identity and device management (e.g. JumpCloud), and AI coding agents in infrastructure work Is a self-starter who thrives in constantly evolving environments, ideally with early-stage experience We’d like someone highly ambitious, motivated and eager to propel their career forward. We prioritise grit, positivity, and the willingness to get stuck in, and encourage you to apply even if your experience doesn't exactly match this job description. Benefits 💰 Equity in a rapidly growing startup Private Health Insurance and Life Assurance Unlimited annual leave - we hold Sylverans to account based on outcome rather than inputs Enhanced parental leave Local bar tab at the end of the month Weekly drinks in the office Catered lunch once a month in office Monthly Deliveroo/equivalent allowance once a month Location 🌍 London, UK (hybrid). We work flexibly whilst encouraging people to come in regularly to our great office in Old St Our Values 🙌 Own it: We build on the momentum of our wins and reflect on and learn from our failures. Stay curious: We keep our focus on the long-term, even if that means short-term challenges. Do what’s right - even when it’