Senior Security Engineer - SIEM, IAM & Secure DevOps

Spendesk; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Spendesk is seeking a senior security engineer to act as the security conscience for engineering, building tooling, training developers, and partnering with Infrastructure on secure‑by‑default solutions. You will own the technical security roadmap and drive remediation across squads from day one.

This is a pure engineering role with an individual contributor track, focusing on technical depth rather than people management.

Qualifications

• Hands-on experience across security domains including code auditing, infrastructure security and incident response.
• Ability to own a security roadmap and communicate progress to non‑specialists.
• Deep understanding of modern web architectures (microservices, cloud‑native, PaaS/SaaS).
• Strong scripting and automation skills (Python, Bash).
• Experience mentoring other engineers or security practitioners.
• Excellent communication: ability to explain CVSS 9.8 risk to a PM and drive prioritisation.

Responsibilities

• Own and operate vulnerability and incident management processes including triage and post‑mortem actions.
• Lead detection and SIEM efforts: architecture, rules, indicators of compromise, runbooks.
• Own IAM implementation and operations for product and infrastructure systems, including SSO/MFA config and access reviews.
• Embed security into the development lifecycle with threat modelling, secure code patterns, and CI/CD hardening.
• Coordinate penetration tests and security audits, manage auditor relationships, drive remediation within governance timelines.

Skills

Code auditing

Infrastructure security (AWS/Linux)

Penetration testing

SIEM operations

Incident response

Tools

ElasticSearch

AWS

GCP

Snowflake

Datadog

Okta

Job description

Spendesk is seeking a senior security engineer to act as the security conscience for engineering, building tooling, training developers, and partnering with Infrastructure on secure‑by‑default solutions. You will own the technical security roadmap and drive remediation across squads from day one.

This is a pure engineering role with an individual contributor track, focusing on technical depth rather than people management.