Security Engineer - Hybrid London: App & Cloud Security

Legatics Limited; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

25 days holiday per year (plus public)

Private Medical Insurance

Pension

Mental healthcare access

Job summary

Legatics, a leading LegalTech scale-up, is hiring a Security Engineer in London. You will secure our platform, cloud estate and internal systems by design, collaborating with engineering to embed security into delivery.

You will own ISO 27001/compliance work for about the first 12 months, supported by AI tooling, then continue contributing to ISMS and client assurance. The role requires hybrid work with two days in the London office.

Qualifications

• Hands-on experience in a security engineering, application security or cloud security role.
• Strong knowledge of web application security, including OWASP principles, authentication and authorisation, and secure API design.
• Practical experience of vulnerability management, from triage to remediation with engineers.
• Hands-on experience securing major cloud, workspace and identity platforms, including SSO and conditional access.
• Experience with security monitoring, log analysis and SIEM or observability tooling.
• Experience of investigating and responding to security incidents.
• Clear communication skills, able to influence engineers and explain risk to non-technical colleagues and clients.

Responsibilities

• Carry out technical risk assessments on new and existing product features, including permissions and access control design.
• Embed security into our software development lifecycle through threat modelling, secure code review and security requirements for new features.
• Perform vulnerability and exploitability analysis, including CVE triage and dependency risk, and prioritise remediation with engineers based on real exposure.
• Operate and consolidate our security scanning and posture tooling, and centralise findings so they are tracked and resolved.
• Review the security risk of proposed integrations and data flows, including third‑party tools and automations.
• Run a programme of continuous security testing, including penetration tests, and own remediation of findings.

Skills

Security engineering

Application security

Cloud security

Incident response

Threat modelling

Scripting

Communication skills

Tools

EDR tooling

SIEM

Threat intelligence

Job description

Legatics, a leading LegalTech scale-up, is hiring a Security Engineer in London. You will secure our platform, cloud estate and internal systems by design, collaborating with engineering to embed security into delivery.

You will own ISO 27001/compliance work for about the first 12 months, supported by AI tooling, then continue contributing to ISMS and client assurance. The role requires hybrid work with two days in the London office.