Lead Security Engineer: IAM, Cloud & Incident Response

Encord; City Of London; On-site; GBP 120,000 - 150,000; Full time

Benefits offered by this job

London office culture

Annual learning & development budget

25 days annual leave

Company lunches

Team offsites

Job summary

Encord is hiring a Lead Security Engineer to own and mature how we secure our people, identities, devices, and the SaaS/AI tools we run the business on. You will build and run controls while leading the security programme across the company.

You’ll protect leadership from targeted attacks, drive ISO 27001 and SOC 2 efforts, and partner with DevOps/Platform on cloud security, keeping pace with growth and security needs.

Qualifications

• 7–8 years of hands-on security experience with a focus on organisational security
• Experience rolling out SSO, MFA, and conditional access across a company
• Experience deploying MDM and EDR for macOS fleets
• Proven ability to run SaaS security, shadow IT discovery, and tool risk reviews
• Experience owning ISO 27001 and SOC 2 controls and audits

Responsibilities

• Own identity and access across Encord, including SSO, MFA, CA, and joiner/mover/leaver workflows.
• Manage device security for macOS fleet via MDM and EDR.
• Lead SaaS/AI security assessments and guardrails for tool usage.
• Protect executives from phishing and AI-enabled fraud.
• Own ISO 27001 and SOC 2 controls, evidence, and auditor walkthroughs.
• Lead third-party and vendor risk assessments.

Skills

SSO

MFA

ISO 27001

SOC 2

Cloud security (GCP)

IAM

EDR

Threat modelling

Incident response

Security governance

Tools

MDM

EDR tools

SIEM

Terraform

Kubernetes

Job description

Encord is hiring a Lead Security Engineer to own and mature how we secure our people, identities, devices, and the SaaS/AI tools we run the business on. You will build and run controls while leading the security programme across the company.

You’ll protect leadership from targeted attacks, drive ISO 27001 and SOC 2 efforts, and partner with DevOps/Platform on cloud security, keeping pace with growth and security needs.