Security Engineering Lead — IAM, Cloud Security & Incidents

Encord; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Equity in a high-growth startup

London office 4+ days/week

Annual learning & development budget

UK & Europe travel for visits & events

Company lunches twice a week

Monthly socials & bi-annual team offsi

Job summary

Encord seeks a Lead Security Engineer to own and mature how the company secures people, identities, devices, and the SaaS/AI tools we run. You’ll be hands-on, building controls and leading the security programme as the go-to expert.

You’ll protect leadership from targeted attacks, drive ISO 27001/SOC 2 initiatives, and collaborate with DevOps on cloud security, all while keeping pace with a fast-growing startup.

Qualifications

• 7-8 years of hands-on security experience with a focus on organisation security.
• Experience rolling out SSO, MFA and conditional access across a company.
• Experience deploying and managing MDM and EDR across a macOS fleet.
• Track record of automated joiner/mover/leaver flows and user access reviews.
• Experience running SaaS security, discovering shadow IT and app permissions.
• Guardrails around AI tool usage and vendor reviews of AI providers.
• Ownership of or significant contribution to ISO 27001 and/or SOC 2 audits.
• Experience defending against targeted phishing and business email compromise.
• Experience leading security incidents and third-party risk assessments.
• Partnering with DevOps/Platform to secure cloud environments (ideally GCP).

Responsibilities

• Own identity and access across Encord, including SSO, MFA, and conditional access.
• Manage device security for macOS fleet via MDM and EDR.
• Run SaaS and AI security: shadow IT, app permissions, and tool adoption guardrails.
• Protect executives from targeted phishing and AI-enabled fraud.
• Own ISO 27001 and SOC 2 controls from policies to auditor walkthroughs.
• Lead third-party and vendor risk assessments.
• Respond to and lead security incidents; improve detection and handling.
• Partner with DevOps/Platform to secure our cloud environment.
• Write policies and runbooks; rollout changes with smooth employee experience.

Skills

Identity & access mgmt

SSO

MFA

Conditional access

MDM

EDR

ISO 27001

SOC 2

Cloud security (GCP)

Threat protection

Incident response

Vendor risk

Policy & runbooks

AI tool governance

Penetration testing coordination

Tools

Terraform

SIEM tooling

MDM tooling

Job description

Encord seeks a Lead Security Engineer to own and mature how the company secures people, identities, devices, and the SaaS/AI tools we run. You’ll be hands-on, building controls and leading the security programme as the go-to expert.

You’ll protect leadership from targeted attacks, drive ISO 27001/SOC 2 initiatives, and collaborate with DevOps on cloud security, all while keeping pace with a fast-growing startup.