Senior Information Security Engineer

Join Samsara as a Senior Security Engineer on our Vulnerability Team, where you'll play a pivotal role in enhancing our security posture. In this position, you will be responsible for identifying vulnerabilities within our systems and implementing effective solutions to mitigate risks. Collaborate with cross-functional teams to ensure the security of our pro…

Causaly develops an AI-powered platform designed to help researchers and decision-makers in biomedicine quickly find and interpret evidence from scientific publications, clinical trials, regulatory documents, and complex data sources. The company’s mission centers on building a high-precision Knowledge Graph and applying generative AI to advance biomedical knowledge. Leading biopharmaceutical organizations use Causaly’s technology to accelerate drug discovery, improve safety, and support informed decisions. With backing from investors such as ICONIQ, Index Ventures, Pentech, and Marathon, Causaly continues to expand its product offerings and market reach. Role overview The Senior Security Engineer position at Causaly is based in London and offers the chance to shape the company’s security strategy and processes. This role provides significant autonomy and involves working closely with the security team, as well as collaborating across engineering and product groups. The Security Engineer will take ownership of vulnerability management, advise teams on security matters, and support SecOps activities. Expect to define strategies, build and refine processes, and serve as a trusted advisor throughout the engineering organization. Key responsibilities Lead the vulnerability management program: set strategy, select tools, prioritize work, and track remediation for dependencies, containers, and cloud infrastructure. Develop and maintain a dependency security strategy, including policies for third-party library use and update schedules. Integrate and manage security tools within CI/CD pipelines, such as SAST, SCA, secrets detection, and container scanning. Act as a security consultant for product and engineering teams, supporting design reviews, architecture decisions, and secure coding practices. Define and maintain security standards and guidelines that are practical for development teams. Oversee and improve the Security Champions program to build security awareness and skills across engineering teams. Support SecOps with incident triage and response, providing security engineering expertise when needed.

Abound is changing how consumer lending works in the UK and beyond. By combining advanced AI with Open Banking data, the company looks at a person’s complete financial situation, not just a credit score, to make lending decisions that are fairer and more accurate. Since launch, Abound has issued over £1.3bn in loans, with a credit performance that outpaces industry averages. The company became profitable within 2.5 years and has backing from major investors, including Citi and Deutsche Bank. With over £2bn in funding, Abound is recognized as one of Europe’s fastest-growing fintechs. Role overview This Senior Security Engineer position is based in London and sits within the Platform team. The role blends DevSecOps responsibilities, serving as a bridge between product engineering and Corporate IT. As a hands-on contributor, the Senior Security Engineer critically reviews security architecture across both production and internal IT environments. During the first 6 to 12 months, the focus will be on designing and implementing next-generation cloud security architecture in AWS and GCP. The role also involves building and maturing internal SOC capabilities, particularly around detection and response. What you will do Manage Microsoft Sentinel to strengthen SIEM/SOAR capabilities Automate RBAC for identity and access management across AWS, Microsoft Entra, and internal systems Embed security controls into GitLab CI/CD pipelines, including scanning, infrastructure-as-code reviews, and automated policy enforcement Support a shift-left approach by integrating security throughout the software development lifecycle Technology stack Cloud & Compute: AWS, ECS Fargate, Aurora, Lambda, GCP Data Lake: S3, DMS, Glue Security & Identity: Microsoft Defender (XDR), Microsoft Sentinel (SIEM/SOAR), Defender for Cloud (CSPM), Microsoft 365, Entra, Intune Cloud Security Tooling: GuardDuty, Security Hub, Inspector, Security Command Center Code & Infrastructure: Terraform, GitLab CI/CD

Join the dynamic Engineering team at Engine by Starling, where we prioritize security as a fundamental engineering discipline rather than a mere checkbox exercise. As a Cloud Security Engineer, you will play a pivotal role in shaping the security architecture of our multi-tenant core banking platform. Your responsibilities will include writing code, automating security measures, and ensuring that our infrastructure across AWS and GCP is secure by design and compliant by default.Your MissionIn this multifaceted role, you will lead initiatives to strengthen both our infrastructure and application platforms. Your primary focus will be on solving intricate security challenges through code, emphasizing three key areas:Identity & Network Security: Develop robust IAM controls and zero-trust network architectures. You will enhance our edge-defense strategies and trust redirection to ensure that every request is authenticated and encrypted.Unified Vulnerability Orchestration: Create a custom dashboard for security data. You will engineer API integrations between scanning engines, dependency trackers, and internal portals to establish a cohesive, automated vulnerability management ecosystem.Compliance as Code: Bridge the gap between technical execution and regulatory compliance. You will develop automated systems that provide real-time evidence for compliance frameworks such as SOC 2, ISO 27001, and PCI, minimizing manual oversight.About the TeamYou will be an integral member of our expanding Security Engineering team, collaborating closely with our Infrastructure, Cross-Cutting, Information Security, and GRC teams. At Engine, we believe that security should be woven into every technical process, not treated as an afterthought. You will engage with engineers across the organization to create a resilient platform that can adapt to evolving threats.Who You AreWe are primarily seeking experienced Cloud Security Engineers, but we also welcome talented Software Engineers with strong programming skills who are eager to tackle security challenges.Engine engineers are driven by the impact of their work and the delivery of high-quality solutions, regardless of their original tech stack. Whether you are a security specialist or a developer with a security-first mindset, your role within the team will be shaped by your unique strengths and interests.Your ResponsibilitiesInstead of performing manual compliance checks, you will develop systems that automate this process.Security as Code: Design and maintain custom security tools in Go to automate evidence collection for SOC 2, ISO 27001, and the remediation of security alerts.

Why Join Deliveroo?At Deliveroo, our mission is to revolutionize how people shop and dine by seamlessly connecting consumers, restaurants, shops, and delivery riders. We strive to make food and product accessibility more convenient and enjoyable, empowering individuals to purchase what they want, when and where they desire.As a forward-thinking, technology-driven organization, we are leading the charge in one of the fastest-growing industries globally. Our small team is making a significant impact as we tackle some of the most fascinating challenges. We prioritize speed, autonomy, and innovative ideas, continuously seeking fresh perspectives.About the RoleIn the role of Senior Security Engineer, you will spearhead the development and implementation of security measures that safeguard our internal networks, workforce identities, endpoints, and corporate systems. Collaborating with security teams across the US, EU, and APAC, you will aim to minimize risk and enhance our security controls.Operating with significant independence, you will define the technical strategy, make architectural decisions, and oversee the execution of complex security projects from start to finish. Your focus will be on balancing risk mitigation with user experience, ensuring that security measures are effective without hindering employee productivity.This position emphasizes Identity and Access Management (IAM), Endpoint Security (EDR), Network Security, logging and detection engineering, and secure SaaS enablement. You will collaborate closely with IT, Legal, Privacy, Engineering, and business stakeholders to ensure that security is integrated as a fundamental practice across the organization.Our security protocols are aligned with recognized frameworks such as the CIS Critical Security Controls and the NIST Cybersecurity Framework (CSF).

Join Checkatrade as a Senior Security Engineer and play a pivotal role in safeguarding our systems and data. In this position, you will be responsible for designing and implementing robust security measures, monitoring potential threats, and ensuring compliance with industry standards. We seek a proactive individual who thrives in a fast-paced environment and is dedicated to continuous improvement.

Application Deadline: We are actively conducting interviews and aim to fill this position promptly as soon as we find the right candidate.THE OPPORTUNITYApollo Research is searching for a Senior Security Engineer to take full ownership of security protocols and practices within our organization. As the first dedicated security hire, you will play a crucial role in maintaining the trust of our innovative AI lab partners and supporting our research mission. This position is embedded within the engineering team and reports directly to the CEO.YOUR RESPONSIBILITIES WILL INCLUDE- Establishing and leading Apollo's security program. You will create and manage the security roadmap, perform risk assessments, and adapt the program as the organization evolves, defining the security posture in relation to our size, threat model, and partner relationships.- Fostering trust with our AI lab partners. You will be the primary contact for security teams of our partners, building relationships with their CISOs, and ensuring our security practices are documented and meet the necessary standards for our partnerships.- Setting security strategies for engineering. You will define security principles and an AppSec strategy that the engineering team will adopt, creating efficient pathways for secure development.- Defining the use of AI tools and integrations at Apollo. You will determine approved tools, data handling procedures, and vetting processes for new technologies, ensuring a balance between security and the need for cutting-edge research tools.- Managing our security tooling stack and automating operations. You will select, implement, and oversee security controls such as EDR/MDR, endpoint management, email protection, and identity management, while automating processes wherever feasible.- Leading compliance and certification efforts. You will spearhead certification initiatives (ISO 27001, SOC 2) as required, integrating compliance into our security practices.- Managing IT administration across the organization. You will oversee Google Workspace and other IT resources.

At Menlo Security, we are dedicated to empowering secure connections, communications, and collaborations worldwide. Our mission has become increasingly vital in the current landscape shaped by COVID-19. We proudly serve a diverse clientele, including Fortune 500 companies, 9 out of the 10 largest global banks, and the Department of Defense.As we transition from a team of 400 towards our next growth phase, we seek passionate individuals who exhibit empathy and adaptability. The ideal candidate will possess a strong ethical foundation, exceptional organizational skills, and a commitment to service. A willingness to both give and receive constructive feedback is essential.Backed by industry-leading investors such as Vista Equity Partners, General Catalyst, JPMC, American Express, HSBC, and Ericsson Ventures, Menlo is poised for significant growth.Position Overview:The Senior Security Engineer will play a crucial role in safeguarding our organization’s digital assets, infrastructure, and data. Responsibilities include designing, implementing, and maintaining security systems and controls, managing security tools, conducting risk assessments, responding to incidents, and ensuring compliance with relevant security standards. This position involves close collaboration with various teams within Menlo to promote security best practices across all technological initiatives, thereby enhancing our security posture and resilience.Key Responsibilities:Security Operations & Monitoring:Oversee the SIEM platform and manage security alerts to identify, investigate, and respond to potential threats.Administer and optimize EDR solutions, specifically Crowdstrike, to ensure comprehensive endpoint protection.Lead incident response efforts, including investigation, containment, remediation, and post-incident analysis.Vulnerability & Risk Management:Oversee the vulnerability management program, including scanning, prioritization, and coordination of remediation efforts.Conduct risk assessments and formulate strategies for risk mitigation.

At Kroo Bank, we are pioneering the future of banking through innovative technology and exceptional digital services. As the fintech sector rapidly evolves, our bank is committed to adapting our roles and responsibilities to seize new business opportunities and meet emerging challenges. We prioritize updating our job descriptions to maintain our leadership in banking innovation.Your Contributions and Key Responsibilities:In the role of Senior Security Engineer, you will play a crucial role in the design and implementation of security measures for our mobile applications, services, and websites, ensuring adherence to the highest security standards. Your expertise will be pivotal in continually assessing and enhancing our security systems, ensuring our products and services are secure by design and compliant with both internal and external regulatory requirements. Key responsibilities include:Security Analysis and Improvement: Continuously evaluate our security systems for potential enhancements, ensuring our defenses lead in cybersecurity practices.Vulnerability Management: Proactively identify, assess, and resolve security vulnerabilities to uphold the integrity and confidentiality of customer data.Security Automation: Streamline security processes and procedures to boost efficiency and effectiveness, minimizing the risk of human error.Security Requirements and Solutions: Define and document system security requirements, offering well-considered recommendations to management.Development of Security Standards: Create and maintain best practices and security standards within the organization, guiding teams in secure coding practices.Secure Design: Collaborate with development teams to ensure robust security measures are integrated into the design of web and mobile front-ends, along with microservice architectures.Cloud Security and Secure Infrastructure: Assist teams in identifying and addressing gaps in infrastructure security, aligning with industry security posture standards.Cybersecurity Collaboration: Work closely with stakeholders across the organization to ensure security measures align with our overarching cybersecurity strategy and protect the bank’s technology infrastructure.Regulatory Compliance: Support teams in meeting compliance requirements for internal audits and external regulators to mitigate potential fines and reputational damage.

Role overview Nexthink is hiring a Senior Corporate Security Engineer in London. This position focuses on protecting information systems and sensitive data by designing, implementing, and managing security controls throughout the corporate environment. What you will do Lead the creation and rollout of security measures for corporate systems Oversee the ongoing management of security protocols to keep data safe Work with teams across the company to identify and assess security risks Support compliance with relevant industry standards Collaboration This role works closely with cross-functional groups, making sure security stays a shared priority and that risk assessments are both thorough and actionable.

* Fully remote from the UK * Innovative Ideas. Real People. At Orca Security, we believe that in the right environment and with the right team, talent knows no boundaries. Our collaborative spirit, combined with our ambition to continuously push limits, has swiftly propelled us to unicorn status, establishing us as a global frontrunner in cloud security innovation. If you're eager to join an extraordinary team that motivates one another daily, now is the perfect moment to find your place within our group. We are on the lookout for passionate and talented individuals like you to become a part of our R&D organization and contribute to our mission of reshaping the future of cloud security. Are you ready to take the plunge and swim with our pod? Position Highlights Rapid Growth: Over the last seven years, we have accomplished milestones that typically take other companies a decade or more. During this time, we’ve significantly expanded our workforce, broadened our customer base, and quickly enhanced our product capabilities. Disruptive Innovation: Our founders recognized that traditional security solutions were inadequate for the cloud, prompting them to forge a new path. We are relentless pioneers who have developed agentless technology and continue to lead as the most comprehensive and innovative cloud security company. Robust Financial Backing: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn that dominates the cloud security sector. We are supported by a remarkable group of investors, including Capital G, ICONIQ, GGV, and SVCI—a collective of CISOs who invest their own funds following thorough due diligence. Respectful and Transparent Culture: Our executives take pride in their accessibility and believe in sharing knowledge with all employees. Every team member plays a crucial role in shaping the future of our industry. About the Role As a Senior Software Engineer on the DSEC (Data & AI Security) team at Orca Security, you will be part of a vital group dedicated to safeguarding customer data and AI assets at scale. The team is responsible for scanning and analyzing a wide array of data stores and AI services—from managed databases and container images to object storage buckets and virtual machines (VMs)—to uncover sensitive data, keys, personally identifiable information (PII), and misconfigurations. You will also have the opportunity to map, model, and assess cloud AI services, providing customers with clear visibility and security insights across their data and AI landscape. This role is ideal for those who are excited about building the infrastructure that supports our Data Security Posture Management (DSPM) and AI security capabilities. You will be instrumental in helping shape the future of cloud security.

Why Join Faculty?Founded in 2014, Faculty is at the forefront of harnessing AI as a transformative technology for organizations globally. With a client base of over 350, we've dedicated ourselves to delivering human-centric AI solutions that drive significant performance improvements. Discover our real-world impact here.We prioritize innovation over trends, focusing on the responsible development and deployment of AI technologies that truly make a difference. Our expertise spans across various sectors including government, finance, retail, energy, life sciences, and defense, enabling us to deliver unparalleled service and results.As we continue to grow, we are eager to find individuals who share our passion for technology and a commitment to building a meaningful legacy through AI.Join us to explore the potential of AI in defining the future.About Our TeamOur Government and Public Services unit is dedicated to leveraging AI to enhance citizen services and promote the public good. From informing strategic decisions in government to optimizing the NHS and safeguarding children from harmful online content, our work demonstrates the transformative power of AI across all levels of government. Due to the sensitive nature of our projects, candidates may be required to obtain UK Security Clearance (SC) and may need to work on-site with government clients periodically.Your RoleAs a Senior Cyber Security Engineer, you will spearhead our security initiatives across critical projects, ensuring the intersection of robust engineering and AI safety. Your role will be vital in protecting essential infrastructure and conducting advanced

The impact you'll make:As the Information Security Team Lead, you will spearhead the daily operations and enhancement of Elliptic's information and cyber security initiatives. Your role will involve driving the adoption of SSDLC v2.0, strengthening our cloud and SaaS security frameworks, and ensuring readiness for external audits and customer due diligence. Collaborate closely with Engineering, Platform, Legal, Procurement, and Customer teams to mitigate risks while facilitating delivery and revenue, including the implementation of Enterprise Tier security features.Your responsibilities will include:Programme Ownership and ExecutionLead the execution of the InfoSec roadmap and performance metrics. Transform strategic objectives into actionable quarterly plans with quantifiable results.Establish necessary gates, controls, and reporting mechanisms for SSDLC v2.0 across build and deployment pipelines.Direct the baselining of CSPM/SSPM and the targeted reduction of misconfigurations and vulnerabilities.Risk Management, Assurance, and Audit PreparednessOversee ISMS processes in compliance with ISO 27001. Organize evidence collection for customer audits and external assurances (e.g., penetration testing, TPOs).Lead or contribute to risk management forums. Ensure prompt remediation, risk acceptance, and tracking of exceptions.Cloud and SaaS Security EnhancementsCollaborate with the Platform team to fortify AWS (IAM, KMS, network segmentation, Security Hub, GuardDuty, logging).Enhance endpoint security, identity and access management, vulnerability management, and logging throughout the organization.Leadership and Team CollaborationProvide daily guidance to TISO, Analysts, and cross-functional contributors.Foster a pragmatic, developer-friendly security culture through enablement, playbooks, and training.Vendor Management and Data GovernanceManage vendor security due diligence with defined SLAs and documentation trails. Assist data protection and BC/DR control owners.Required Qualifications:Demonstrated experience leading security initiatives in a cloud-native product environment.Deep understanding of security frameworks and compliance standards.Strong communication skills with the ability to collaborate effectively across teams.

Join Deliveroo as a Senior Engineering Manager in our Proactive Security team. In this pivotal role, you will lead a talented team of engineers dedicated to enhancing our security posture and proactively addressing cyber threats. You will spearhead innovative projects, providing both technical leadership and strategic direction to ensure the safety and integrity of our systems.

Join Us in Empowering the UK's Small Businesses At Funding Circle, we believe that small businesses are the backbone of the economy, and our mission is to provide them with the support they need to thrive. Our innovative platform leverages advanced data analytics to facilitate rapid access to funding, ensuring that our clients can secure the resources they need in mere minutes.Combining the agility of a fintech startup with the reliability of a publicly traded company, we offer Circlers the independence to take initiative while making a significant impact on the industry.We take pride in our high-performance culture, where collaboration and support are at the forefront. We uplift one another, challenge the status quo, and succeed together because we understand that unity accelerates progress and innovation.Your Contribution Matters: Last year alone, our platform enabled businesses to generate £7.2 billion for the UK economy Join us in making a difference![Explore Our Impact Report] | [Check Our Trustpilot]Your Role Location: London (Hybrid) | Work Schedule: 2 days in-office | Salary: Competitive + BenefitsLead the definition, advocacy, and integration of secure software development lifecycle (SSDLC) practices and secure coding standards throughout engineering teams via collaboration, training, and the use of tools.Conduct threat modeling exercises for cloud-native applications, microservices, and various infrastructure components.Oversee internal and external penetration testing engagements for Funding Circle's applications, services, and cloud infrastructure.Work closely with Cloud Platform Engineers, DevX, and Product Engineering to embed security requirements into system designs and technology choices from the beginning.Serve as a subject matter expert in DevSecOps, application security, and cloud security (AWS), offering guidance and mentorship to fellow engineers.Drive the implementation of security automation across cloud infrastructure configuration, vulnerability management, and compliance monitoring.Design, implement, and promote the adoption of robust security architectures, controls, and best practices within our AWS cloud environment.

About KrooKroo is on a mission to redefine banking by being the first financial institution that is genuinely trusted and cherished by its customers. We empower individuals to take charge of their financial destinies and reach their aspirations while positively contributing to the environment.At Kroo, integrity, transparency, and honesty are at the core of our values. We aim high, dream big, and are unwavering in our pursuit of excellence. Innovation and continuous learning are part of our ethos, and we are committed to this journey together.As a Vulnerable Customer Support Specialist, you will take a proactive role in managing customer vulnerabilities, ensuring outstanding service for those with additional needs, and providing valuable insights to enhance processes and workflows. Join us as we continue to grow and make a difference!

Ebury empowers ambitious businesses to unlock global growth, and we extend the same philosophy to our team members. We promote innovation, collaboration, and problem-solving, creating an inclusive environment where everyone feels valued, supported, and empowered to thrive.If you are a collaborative individual eager to transform how businesses operate on a global scale, we invite you to connect with us. Discover how Ebury can fast-track your career and help you shape the future.Senior Security Engineer - Cloud InfrastructureHybrid (4 days in office) in LondonEbury is making significant investments in its cloud infrastructure security to ensure the integrity and safety of our global financial services. As a Senior Security Engineer specializing in Cloud Infrastructure, you will be responsible for enhancing and managing the security posture of our cloud environments across AWS and GCP, focusing on network security, perimeter defense, and attack surface management.This hands-on position requires extensive expertise in cloud-native security controls, network architecture, and proactive defensive security operations. You will design, implement, and maintain security infrastructure that identifies and mitigates threats before they affect our operations. Collaborating closely with platform, infrastructure, and security operations teams, you will embed security best practices into our cloud foundations.Key ResponsibilitiesManage cloud security posture and attack surface: Ensure comprehensive visibility and control across AWS and GCP environments. Implement cloud-native security monitoring, detection, and alerting mechanisms to proactively identify and mitigate threats, establishing and enforcing security baselines through policy-as-code.Design and oversee web application firewall infrastructure: Maintain WAF configurations across AWS and GCP, creating and fine-tuning detection rules in line with application threat models and emerging attack patterns. Develop operational processes for rule management and incident response integration, collaborating with application teams to implement protections without disrupting availability.Architect network segmentation and isolation: Design and implement strategies ensuring proper separation between development, staging, and production environments. Define consistent patterns across multi-cloud infrastructure, apply zero-trust principles to workload communication, and document reference architectures for engineering teams.

Galaxy Digital Services seeks a Vice President, Senior Product Security Engineer for its London office. This role focuses on strengthening the security of microservices and cloud applications across a range of digital asset and trading platforms. The position reports to the Director of Product Security. Role overview The Senior Product Security Engineer will assess complex trading systems and blockchain architectures. Responsibilities include identifying vulnerabilities, recommending or implementing remediations, and ensuring security best practices are integrated throughout product and software engineering processes. Collaboration with Engineering, Product, and Infrastructure teams is central to this role, supporting secure software delivery as the company expands. What you will do Evaluate the security of microservices and cloud-based applications Conduct assessments of trading systems and blockchain architectures Facilitate or implement remediation efforts to address identified risks Work closely with cross-functional teams to deliver secure products Requirements Expertise in securing microservices and cloud applications Strong understanding of product and software engineering processes Experience with trading systems and blockchain security Ability to collaborate effectively with technical and product teams Our core values Pursue excellence Be selective to achieve effectiveness Maintain high alignment with loose coupling Encourage transparent disagreement Foster independent decision-making Assemble dream teams

As a Senior Software Engineer specializing in Proactive Security at Deliveroo, you will play a crucial role in safeguarding our platform against emerging threats. You will collaborate with cross-functional teams to design and implement robust security solutions that protect customer data and ensure the integrity of our systems.Your expertise in software development and security practices will be instrumental in identifying vulnerabilities and enhancing our security posture. This role will challenge you to think critically and innovate solutions in a fast-paced environment.