Security Engineering Lead for AI & Cloud

United States Digital Space LLC; Greater London; Hybrid; GBP 90,000 - 150,000; Full time

Benefits offered by this job

London office access

Learning budget

25 days annual leave

Job summary

United States Digital Space LLC is seeking a Lead Security Engineer to own and mature the company’s security program, protecting people, identities, devices, and the SaaS/AI tools we run the business on. You will be hands-on while shaping policies, controls, and incident response.

You’ll work across DevOps and Platform teams to secure our cloud environment (GCP preferred), implement ISO 27001 and SOC 2 controls, and defend against targeted phishing and fraud.

Qualifications

• Around 7–8 years of hands-on security experience with a focus on organisational security.
• Experience implementing SSO, MFA, and conditional access at company scale.
• Experience deploying MDM/EDR across a macOS fleet.
• Proven ability to own ISO 27001 and SOC 2 programs, policies and evidence.
• Experience defending against phishing, BEC and AI-enabled fraud.
• Strong collaboration with DevOps/Platform to secure cloud environments (GCP preferred).

Responsibilities

• Own identity and access across the company including SSO, MFA and conditional access.
• Lead device security across the macOS fleet using MDM and EDR.
• Run SaaS and AI security, review tools, guardrails and shadow IT.
• Respond to security incidents and improve detection/response processes.
• Partner with DevOps and Platform to secure cloud environments, IAM, and CSPM.
• Own ISO 27001 and SOC 2 controls end-to-end, including auditor walkthroughs.
• Lead third-party and vendor risk assessments and security questionnaires.

Skills

Identity management

SSO

MFA

EDR

MDM

Cloud security

ISO 27001

SOC 2

Threat protection

Phishing defense

Security incidents

Vendor risk

IAM

GCP

Policy writing

Runbooks

Tools

MDM

EDR

SIEM

CSPM

SAST/DAST/ Secrets tools

Job description

United States Digital Space LLC is seeking a Lead Security Engineer to own and mature the company’s security program, protecting people, identities, devices, and the SaaS/AI tools we run the business on. You will be hands-on while shaping policies, controls, and incident response.

You’ll work across DevOps and Platform teams to secure our cloud environment (GCP preferred), implement ISO 27001 and SOC 2 controls, and defend against targeted phishing and fraud.