Lead Data Security Engineer

Takeaway.com; Fleet; On-site; GBP 90,000 - 140,000; Full time

Job summary

JET is seeking a Lead Data Security Engineer to define the North Star for security in our data platforms. You will partner with data teams to embed scalable security controls, automate guardrails, and guard against data exploits across cloud environments — enabling rapid, safe growth.

You will implement encryption, data discovery and governance, and secure LLM/AI pipelines while aligning security with business strategy. The role emphasizes secure-by-default development and data risk management.

Qualifications

• Hands-on experience building and running data security controls (DSPM, DLP, data classification, encryption, access governance).
• Strong automation skills and ability translate security goals into code and IaC.
• Experience embedding automated security checks into CI/CD alongside developers and data engineers.

Responsibilities

• Partner with data teams to embed security controls into data pipelines and governance models.
• Build secure solutions with data teams through collaborative engineering.
• Identify patterns from audits and fix systemic vulnerabilities with central security engineering.
• Bridge security standards with real-world data practices and align team insights.
• Design, build and maintain automated workflows to detect and fix data security risks at scale.
• Deploy monitoring, guardrails, and auto-remediation across cloud environments.

Skills

Security engineering

DSPM

DLP

Data classification

Encryption

Access governance

CI/CD security

Cloud security

Scripting/Automation

GDPR compliance

Job description

About this role

JET's Information Security organisation protects a technology‑led, cloud‑native platform serving millions of customers across multiple markets. As a Lead Data Security Engineer, you will define the technical "North Star" for security at JET, shaping how we protect the experiences of millions of customers worldwide. This is a pivotal individual contributor, leadership role where you will translate complex business risks into a scalable, proactive defense strategy that enables growth without compromise.

You will work at the intersection of technology and business strategy, partnering with leaders to ensure our security framework supports our mission: connecting customers with the food and services they love. Your vision will lead our security evolution, your execution will deliver enterprise‑wide resilience, and your approach will care deeply about enabling teams to innovate safely.

Key components to the position

• Work directly inside data teams as an embedded security partner to understand their building processes, data handling, and actual risk profiles.
• Build secure solutions alongside data teams through collaborative engineering instead of just handing down rigid security requirements.
• Identify recurring issue patterns and collaborate with central security engineering to fix systemic vulnerabilities.
• Act as a two‑way bridge – connecting security standards with real‑world data practices, aligning both teams' insights and needs.
• Design, build, and maintain automated workflows to detect and fix data security risks at scale.
• Deploy continuous monitoring, automated guardrails, and auto‑remediation scripts across cloud environments.
• Engineer CI/CD gates and infrastructure‑as‑code baselines to stop data leaks before code deployment.
• Support the rollout of encryption, masking, data discovery, classification, and access governance.
• Secure LLM and AI pipelines by guarding against prompt injection and tracking data lineage.
• Prioritise Wiz and DSPM findings by context to implement fixes, while documenting tools to enable a "Security‑as‑Code" mindset.

What will you bring to the team?

• Deep, hands‑on technical skills in data security. You’ve built and run controls like DSPM, DLP, data classification, encryption, or access governance, not just designed them on paper.
• Strong automation and scripting skills. You’re comfortable translating security goals into working code, remediation scripts, and infrastructure‑as‑code.
• Experience embedding automated security checks into CI/CD pipelines, working shoulder to shoulder with developers and data engineers without slowing them down.
• Practical cloud data security experience, including object storage security.
• A solid understanding of GDPR and what it means for how data gets handled.
• Strong ethics and sound judgement when handling sensitive information.
• Collaborative approach to security governance, with a track record of embedding security seamlessly into development and operations workflows.