Lead AppSec Engineer for AI SaaS (Equity)

Encord; Greater London; On-site; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Equity

London office 4+ days/week

Learning & development budget

Team lunches

Travel for customer visits

Bi-annual team offsites

Job summary

Encord is hiring a Lead Security Engineer to own application security across our platform and embed secure practices in design, build, and ship processes. You will set the security direction for a growing team and collaborate with engineering on authentication, multi-tenancy, and data protection.

We seek 7+ years in software or security engineering with hands-on AppSec, strong Python/TypeScript coding, and deep web/API security knowledge.

Qualifications

• 7+ years in software or security engineering with hands-on AppSec experience.
• Strong coding ability (Python and/or TypeScript).
• Deep knowledge of web and API security (OWASP Top 10, OAuth/OIDC).
• Experience securing cloud-native SaaS (GCP/AWS, Kubernetes).
• Proven ability to build security tooling and processes in a fast-moving product company.

Responsibilities

• Own the application security program end to end: threat modelling, secure design reviews, code review, and vulnerability management.
• Build security into the SDLC with SAST, DAST, SCA, and secrets scanning in CI/CD.
• Partner with engineering on authentication, authorization, multi-tenancy isolation, and data protection across APIs and SDKs.
• Lead penetration testing, bug bounty triage, and incident response for application-layer issues.
• Support customer security reviews and compliance (SOC 2, HIPAA, GDPR) with practical controls.
• Mentor engineers and raise the security bar across the organisation.

Skills

AppSec

Threat modelling

Coding (Python/TS)

Web/API security

Cloud security (GCP/AWS)

Security tooling

Communication

Tools

SAST

DAST

CI/CD security

Kubernetes

OAuth/OIDC

Cloud platforms

Job description

Encord is hiring a Lead Security Engineer to own application security across our platform and embed secure practices in design, build, and ship processes. You will set the security direction for a growing team and collaborate with engineering on authentication, multi-tenancy, and data protection.

We seek 7+ years in software or security engineering with hands-on AppSec, strong Python/TypeScript coding, and deep web/API security knowledge.