Security Engineer – Cloud, AI & Incident Response

Legatics; City Of London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

25 days holiday per year

Early Finish Fridays

Pension with NEST

Private Medical Insurance with Bupa

Healthshield Health Cash Plan

Personal Learning & Development budget

Mental healthcare for you and your IME

Enhanced parental leave policies

Career progression opportunities

Regular socials

Job summary

Legatics, a leading LegalTech scale‑up, is seeking a Security Engineer to secure our platform, cloud estate and internal systems. You will own security by design, collaborate with engineering, and drive incident response and AI security strategy from London.

This permanent, hybrid role focuses on application security, cloud security, identity, endpoint protection and security monitoring, with ISO 27001/compliance duties for the first year.

Qualifications

• Hands-on experience in security engineering, application or cloud security.
• Strong knowledge of web app security, authentication/authorization and secure API design.
• Practical vulnerability management from triage to remediation with engineers.
• Hands-on experience securing major cloud, workspace and identity platforms (SSO, conditional access).
• Experience with security monitoring, log analysis and SIEM/observability tooling.
• Experience investigating and responding to security incidents.
• Comfort with reading/writing code or scripts to automate security work.

Responsibilities

• Carry out risk assessments on new and existing product features and access controls.
• Embed security into SDLC via threat modelling, secure code reviews and requirements for new features.
• Run vulnerability and exploitability analysis and prioritise remediation with engineers.
• Operate and consolidate security scanning and posture tooling and track findings.
• Review security risk of integrations and data flows with third‑party tools.
• Lead security testing programs including penetration tests and remediation.

Skills

Security engineering

OWASP security

Vulnerability management

Cloud security

Security monitoring / SIEM

Incident response

Scripting (Python/TypeScript/Bash)

Job description

Legatics, a leading LegalTech scale‑up, is seeking a Security Engineer to secure our platform, cloud estate and internal systems. You will own security by design, collaborate with engineering, and drive incident response and AI security strategy from London.

This permanent, hybrid role focuses on application security, cloud security, identity, endpoint protection and security monitoring, with ISO 27001/compliance duties for the first year.