Security Engineer: Cloud, AI & Incident Response (London)

Legatics; Greater London; Hybrid; GBP 85,000 - 120,000; Full time

Benefits offered by this job

25 days holiday per year

Pension with NEST

Private Medical Insurance with Bupa

Healthshield Health Cash Plan

Personal Learning & Development budget

Mental healthcare for you and family

Enhanced parental leave policies

Career progression opportunities

Regular socials

Job summary

Legatics, a leading LegalTech scale-up in London, seeks a Security Engineer to design and secure our platform, cloud estate and internal systems. The role collaborates with engineering to embed security by design across product, identity and endpoints, with incident response leadership and AI security focus.

In the first year, you will own ISO 27001 compliance and client assurance, supported by AI tooling, before continuing to contribute to controls, evidence and security improvements across the

Qualifications

• Hands-on experience in security engineering, application or cloud security.
• Strong knowledge of web application security, OWASP principles, authz/authn and API security.
• Experience with vulnerability management and remediation workflow.
• Securing major cloud, identity and workspace platforms (SSO, conditional access).
• Experience with security monitoring, log analysis and SIEM/observability tooling.
• Experience handling security incidents and incident response processes.
• Ability to read/write code or scripts to automate security tasks (Python/TypeScript/Bash).
• Excellent communication to explain risk to engineers and clients.

Responsibilities

• Carry out risk assessments for new features and access control designs.
• Embed security in SDLC via threat modelling and secure code reviews.
• Lead vulnerability triage and remediation with engineers.
• Operate security tooling and centralise findings for remediation.
• Review security risk of integrations and data flows with third‑party tools.
• Run continuous security testing including penetration tests and fix findings.
• Audit cloud/identity posture and enforce SSO/conditional access.
• Own email, endpoint security and EDR tuning.
• Develop monitoring, alerting and threat intel pipelines.
• Lead ISO27001/compliance work for client assurance in early months.

Skills

Security engineering

Web app security

Vulnerability management

Cloud security

Identity and endpoint security

Security monitoring

Incident response

Scripting (Python/TypeScript/Bash)

Communication skills

ISO 27001 knowledge

AI security

Tools

SIEM tooling

EDR tooling

Threat intelligence platforms

Job description

Legatics, a leading LegalTech scale-up in London, seeks a Security Engineer to design and secure our platform, cloud estate and internal systems. The role collaborates with engineering to embed security by design across product, identity and endpoints, with incident response leadership and AI security focus.

In the first year, you will own ISO 27001 compliance and client assurance, supported by AI tooling, before continuing to contribute to controls, evidence and security improvements across the