Flagstone operates a fintech platform that centralizes cash management for UK savers, letting users spread deposits across 200+ savings accounts from over 65 banks through a single application. The attack surface is real: they're a regulated financial entity holding a direct line to customer deposits and partner bank integrations. Every credential, API connection, and data flow is a target.
The team runs lean and ships fast - multiple deployments per day, continuous delivery pipelines, fast feedback loops. Engineering embraces lean thinking, which means security has to be baked into velocity, not bolted on after the fact. With 350+ staff, they're large enough to sustain dedicated security functions but still lean enough that cross-functional fluency matters.
Flagstone is UK-based and emphasizes a culture of collaboration, inclusivity, and professional development alongside high performance. For security roles, that means proximity to product and engineering, direct impact on platform integrity, and the kind of operational rigor that financial services demand without the bureaucratic bloat of legacy institutions.
