Senior Security Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Perform security assessments, threat hunts, code and log evaluations, and penetration testing.

• Propel enhancements in continuous monitoring.

• Design, implement, optimize, and oversee security controls and tools across endpoints, infrastructure, and application CI/CD pipelines.

• Work in collaboration with engineering teams to provide security reviews, guidance, and automation.

• Address security incidents by managing containment, remediation, forensics, and root cause analysis.

• Engage in tabletop exercises and incident simulations.

• Organize external penetration tests.

• Assist with enterprise customer onboarding, including SSO integrations, network allowlisting, and security evaluations.

• Act as a trusted security point of contact in customer-facing technical and security discussions.

• Support vendor security assessments and evaluate third-party risks.

• Help maintain compliance with GDPR, ISO 27001, ISO 42001, and upcoming regulatory and certification standards.

• Keep abreast of emerging threats, vulnerabilities, and technologies.

• Contribute to company-wide initiatives aimed at enhancing security awareness.

⛳️ Requirements

• 4–8 years of experience in cybersecurity, technical security, or solutions engineering roles.

• Practical experience in deploying and managing security tools such as EDR, IAM, MDM, SIEM, ZTNA, or vulnerability scanners.

• Excellent communication skills with the ability to clarify technical security concepts to non-security stakeholders.

• Familiarity with networking, Windows/macOS, and security protocols.

• Experience using security reporting and compliance tools.

• Knowledge of cloud security, particularly in AWS.

• Proficiency in programming languages such as TypeScript, Python, Bash, or similar.

• Strong capabilities in log analysis, threat investigation, and incident response.

• A proactive and solution-oriented mindset with a focus on taking action.

• Desirable: hands-on experience with AWS security services, including CloudTrail, GuardDuty, WAF, IAM, and Security Hub.

• Desirable: experience in enterprise customer technical onboarding or security validation.

• Desirable: expertise in DAST/SAST and IaC security.

• Desirable: knowledge of Kubernetes and container security.

• Desirable: experience in Identity & Access Management, such as Google or Okta.

• Desirable: familiarity with JVM languages, Terraform/IaC, CDK, or React.

• Desirable: understanding of GDPR, ISO 27001, SOC 2, and EU AI Act/LLMs.

• Desirable: experience with audit delivery or GRC tools like Drata or Vanta.

• Desirable: interest in AI or knowledge of AI security risks and frameworks, including ISO 42001.

• Desirable: possession of security qualifications or certifications.

🏝️ Benefits

• Access to a modern cloud-native stack with the chance to influence tooling and architecture.

• Opportunity to make an immediate impact by selecting and deploying new tools to support a rapidly growing business.

• Influence customer-facing outcomes through enterprise deals, trust, compliance, and technical onboarding.

• Autonomy and collaboration, with opportunities to focus on coding/programming and implementation.

• Growth potential to shape security architecture, including HA and ZTNA.

• Supportive, empowering, and inclusive leadership.

• Opportunities for off-site gatherings and in-person collaboration when appropriate.