Senior AppSec Engineer - Build Secure SaaS, Equity

Encord; City Of London; Vor Ort; GBP 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Competitive salary

London office 4+ days/week

25 days annual leave + public holidays

Learning & development budget

Travel for customer visits

Company lunches

Team offsites

Zusammenfassung

Encord, based in London, seeks a Lead Security Engineer to own application security across our platform and to shape a growing security function. You will embed secure practices from design to deployment and drive security maturity across the product team.

You will lead threat modelling, secure design reviews, and vulnerability management, and work with engineering on authentication, multi-tenancy, and data protection across APIs and SDKs. Experience securing cloud-native SaaS is essential.

Qualifikationen

• 7+ years in software or security engineering, with hands-on AppSec experience.
• Strong coding ability (Python and/or TypeScript).
• Deep knowledge of web and API security (OWASP Top 10, OAuth/OIDC, authz models).

Aufgaben

• Own the application security program end to end: threat modelling, secure design reviews, code review, vulnerability management.
• Integrate security into the SDLC with SAST/DAST, SCA, and secrets scanning in CI/CD.
• Partner with engineering on authentication, authorization, multi-tenancy, and data protection across APIs/SDKs.
• Lead penetration testing, bug bounty triage, and incident response for app-layer issues.
• Support customer security reviews and compliance (SOC 2, HIPAA, GDPR).
• Mentor engineers and raise the security bar across the organisation.

Kenntnisse

AppSec

Python/TypeScript

Web security

Cloud-native SaaS

OAuth/OIDC

Security tooling

Threat modelling

Tools

SAST/DAST tools

Kubernetes

Cloud platforms (AWS/GCP)

Jobbeschreibung

Encord, based in London, seeks a Lead Security Engineer to own application security across our platform and to shape a growing security function. You will embed secure practices from design to deployment and drive security maturity across the product team.

You will lead threat modelling, secure design reviews, and vulnerability management, and work with engineering on authentication, multi-tenancy, and data protection across APIs and SDKs. Experience securing cloud-native SaaS is essential.