Senior AppSec Engineer - Secure SaaS & APIs

Encord; Greater London; Hybrid; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Competitive salary

Meaningful equity

London office

25 days annual leave

Learning & development budget

Travel for customer visits

Daily company lunches

Team offsites

Job summary

Encord is the universal data layer for AI that helps 300+ AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production.

Encord is seeking a Lead Security Engineer to own application security across our platform, embedding secure practices into how we design, build, and ship software, and setting the direction for a growing security function.

Qualifications

• 7+ years of experience in software or security engineering.
• Strong coding ability in Python and/or TypeScript.
• Deep knowledge of web and API security (OWASP Top 10, OAuth/OIDC, authz).
• Experience securing cloud-native SaaS (GCP/AWS, Kubernetes, containers).
• Track record building security tooling and processes in fast-moving product companies.
• Clear communicator who can influence engineering teams and customers.

Responsibilities

• Own the application security program end to end: threat modelling, secure design reviews, code review, and vulnerability management.
• Build security into the SDLC with SAST, DAST, dependency/SCA, and secrets scanning integrated into CI/CD.
• Partner with engineering on authentication, authorization, multi-tenancy, and data protection across APIs and SDKs.
• Lead penetration testing, bug bounty triage, and incident response for application-layer issues.
• Support customer security reviews and compliance (SOC 2, HIPAA, GDPR) with practical controls.
• Mentor engineers and raise the security bar across the organisation.

Skills

7+ years experience

Python/TypeScript

Web API security

Cloud SaaS security

Security tooling

Communication

Job description

Encord is the universal data layer for AI that helps 300+ AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production.

Encord is seeking a Lead Security Engineer to own application security across our platform, embedding secure practices into how we design, build, and ship software, and setting the direction for a growing security function.