Lead Security Engineer

Wave Talent; Greater London; Hybrid; GBP 110,000 - 180,000; Full time

Benefits offered by this job

Founding security engineer role with massive ownership

Modern serverless stack (AWS, IaC, TypeScript)

Equity with real upside

High-impact opportunity to build security from the ground up

Job summary

A leading tech recruitment firm in London is seeking a Senior Security Engineer to shape the security function for a fast-growing B2B SaaS company. You will build security features, strengthen AWS infrastructure, and interact with clients to ensure their trust in the product's security. The ideal candidate has strong security engineering experience in cloud-native environments, proficiency with IaC and TypeScript, and a high ownership mindset.

Qualifications

• 5+ years of experience in security engineering.
• Experience with cloud-native SaaS security.
• Familiarity with security tooling.
• High ownership mindset with bias for action.

Responsibilities

• Build new security features and harden AWS infrastructure.
• Engage with enterprise clients regarding security architecture.
• Develop the security function from the ground up.
• Lead security initiatives and ensure secure software lifecycle.
• Engage with enterprise customers to discuss architecture and secure connections.

Skills

Strong security engineering experience in cloud-native SaaS environments

Hands-on with IaC (Terraform/CDK) and TypeScript

Proven experience building & rolling out security features ahead of time

Ability to partner with sales/CS teams on enterprise customer calls

High ownership mindset

Tools

Vanta

Snyk

Wiz

Semgrep

Orca

Job description

Overview

This range is provided by Wave Talent. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

Job Title: Senior Security Engineer

Location: London (3 office days/week)

Industry: B2B SaaS / Procurement & Spend Control

Stage: Series A, backed by tier-1 VCs

Benefits

• Founding security engineer role with massive ownership
• Modern serverless stack (AWS, IaC, TypeScript)
• Equity with real upside
• High-impact opportunity to build security from the ground up

This role doens't offer relocation or sponsorship

Responsibilities

You’ll be deeply embedded in the platform engineering team, building new security features, rolling out testing frameworks, and hardening serverless AWS infrastructure. Security here isn’t an afterthought; you’ll design it in from the start, making sure the stack (AWS, serverless, TypeScript, IaC) stays ahead of evolving threats.

Alongside the engineering, you’ll play a critical role in customer conversations, providing reassurance to enterprise clients, walking them through architecture, frameworks, and secure connections, and showing how security is built into the software lifecycle. About 10–15% of your role will be commercial-facing, enabling revenue and building trust with customers.

This is a senior/staff-level role where high ownership, passion for delivery, and the ability to make meaningful change are essential. You’ll have the chance to build the security function, shape culture, and scale security as the company grows.

Must have requirements

• Strong security engineering experience in cloud-native SaaS environments
• Hands-on with IaC (Terraform/CDK) and TypeScript
• Proven experience building & rolling out security features ahead of time
• Ability to partner with sales/CS teams on enterprise customer calls
• High ownership mindset, bias for action, and passion for impact

Bonus points for experience with

• Security tooling (Vanta, Snyk, Wiz, Semgrep, Orca)
• Multi-region, fine-grained data security at scale
• Open-source contributions, CTF wins, or conference talks
• Procurement/fintech data-flows or PCI

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Industries: Software Development