Information Security Engineer

Algolia; United Kingdom; Remote; GBP 90,000 - 150,000; Full time

Job summary

Algolia is expanding its Information Security team and seeking a pragmatic engineer to strengthen our security posture across our infrastructure and products. You will design automated controls, monitor systems, and collaborate with engineering to embed security into new features and pipelines.

You will lead risk assessments, participate in incident response, and help advance SOC 2, ISO 27001, and GDPR programs while working in a remote‑friendly, global team.

Qualifications

• 3–6 years of experience in Information Security engineering or related fields.
• Proficiency in at least one scripting language (Python, Bash, or Go).
• Experience with cloud security in AWS, GCP, or Azure.
• Experience with log management/SIEM, EDR, SAST, SOAR, CTI.
• Strong communication and cross‑functional collaboration.

Responsibilities

• Design and automate controls, detection mechanisms, and tooling to improve information security.
• Research, evaluate, and recommend new information security technologies and frameworks.
• Design and maintain monitoring and remediation systems to protect data and systems.
• Partner with engineering and product teams to integrate security into features and pipelines.
• Contribute to improving information security standards, processes and best practices.
• Conduct risk assessments and threat modeling of core systems and vendors.
• Participation in incident response activities and post‑incident analysis.
• Support SOC 2, ISO 27001, GDPR initiatives and vulnerability programs.

Skills

Scripting / Automation

Cloud security

Communication

Threat modeling

Tools

Kubernetes

CrowdStrike

Obsidian

SIEM

Job description

At Algolia, we’re proud to be a pioneer and market leader in AI Search, empowering 17,000+ businesses to deliver blazing-fast, predictive search and browse experiences at internet scale. Every week, we power over 30 billion search requests — four times more than Microsoft Bing, Yahoo, Baidu, Yandex, and DuckDuckGo combined.

In 2021, we raised $150 million in Series D funding, quadrupling our valuation to $2.25 billion. This strong foundation enables us to keep investing in our market‑leading platform and serving incredible customers like Under Armour, PetSmart, Stripe, Gymshark, and Walgreens.

At Algolia, Information Security is built into everything we do. It is not an afterthought; it’s a core design and operational principle. Our Information Security team ensures that trust, privacy, and resilience are embedded throughout our infrastructure, products, and internal processes.

As Algolia continues to expand globally, we are growing our Information Security team to match that scale. We are seeking a pragmatic, technically strong, and collaborative information security engineer to strengthen our Information Security posture and enable the company to innovate securely and confidently.

What You’ll Do

• Design and automate controls, detection mechanisms, and tooling to improve the Information Security of Algolia’s infrastructure and products
• Research, evaluate, and recommend new Information Security technologies, techniques, and frameworks
• Design, implement, and maintain information security monitoring and remediation systems that move the needle in protecting Algolia’s customers’ data, and protecting Algolia’s systems and data
• Partner with engineering and product teams to integrate Information Security into new features, systems, and development pipelines
• Contribute to improving Information Security standards, processes, and best practices across the company
• Conduct Information Security risk assessments and threat models of core systems, services, and third‑party vendors
• Participate in and sometimes lead Information Security incident response activities and post‑incident analysis
• Support ongoing and emerging Information Security and compliance initiatives (e.g., SOC 2, Type II, ISO 27001, C5, GDPR)
• Manage and enhance Algolia’s public bug bounty and vulnerability disclosure programs

What We’re Looking For

• 3–6 years of experience in Information Security engineering, infrastructure protection, or related technical domains
• Proficiency in scripting or automation with at least one language (Python, Bash, Go, or similar) is required. Experience with Kubernetes is preferred.
• Strong understanding of Information Security principles for modern cloud environments (AWS, GCP, or Azure) as well as operations in datacenters.
• Strong understanding of, comfort with, and at least three years of experience in operating, configuring, and managing log management / SIEM, threat detection and posture management, endpoint detection and response, SAST, SOAR, CTI, and other table‑stakes information security systems with strong preference to at least one year of experience with deep use of Crowdstrike or Obsidian (preferably both).
• Knowledge of common Internet information security threats, attack vectors, and mitigation strategies
• Solid understanding of computer systems, networks, and low‑level protocols from an Information Security perspective
• Experience in incident detection, response, and vulnerability management
• Excellent communication skills, with the ability to explain Information Security risks and concepts to both technical and non‑technical audiences
• Clear ability to collaborate with the VP of Information Security to advise on next steps and to work independently to achieve business outcomes — rather than a ticket‑based approach.
• Full professional proficiency in English

Nice to Have

• Experience scaling Information Security programs in high‑growth SaaS organizations (10,000+ customers, $50–200 M ARR range)
• Cloud‑specific Information Security certifications or equivalent training (e.g., AWS Security Specialty, GCP Professional Security Engineer)
• Experience with complex secrets management systems such as Hashicorp Vault
• Experience contributing to Information Security communities, such as bug bounty triage, open‑source security tools, or Capture the Flag events
• Background in privacy engineering, threat modeling, or secure software design

Why You’ll Love Working Here

• A culture that values continuous learning, curiosity, and collaboration in Information Security
• A global, remote‑friendly team that treats Information Security as an enabler of innovation
• Opportunities to make a measurable impact on the Information Security of systems used by millions of end users
• Ongoing professional development and support as the Information Security landscape evolves

Flexible Workplace Strategy

Algolia’s flexible workplace model is designed to empower all Algolians to fulfill our mission to power search and discovery with ease. We place an emphasis on an individual’s impact, contribution, and output, over their physical location. Algolia is a high‑trust environment and many of our team members have the autonomy to choose where they want to work and when.

We have a global presence with offices in Paris, NYC, London, Sydney, and Bucharest, however we also offer many of our team members the option to work remotely either as fully remote or hybrid‑remote employees. Positions listed as “Remote” are only available for remote work within the specified country. Positions listed within a specific city are only available in that location — depending on the role it may be available with either a hybrid‑remote or in‑office schedule.

Algolia does not discriminate on the basis of race, color, religion, sex, age, national origin, military status, veteran status, disability status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.

The annual base salary compensation range for this role reflects market pay data within this location. The exact compensation offered for this role may vary depending on specific location and job‑related knowledge, technical skills, and experience.