Security Engineer — Build the Security Foundation

Spur; London; On-site; NOK 1,132,000 - 1,509,000; Full time

Benefits offered by this job

Competitive salary

Significant equity

Budget for learning and growth

Bi-annual team retreats

Autonomy and ownership

Job summary

Wexler, a London-based legal AI company, seeks a hands-on security engineer to own and grow our security program spanning infrastructure, product, and compliance. You will collaborate with engineering, operations, and leadership to prove security is demonstrably strong for customers.

You will implement tooling, drive secure-by-design practices, and lead risk assessments while aligning with ISO 27001/SOC 2 standards and industry best practices.

Qualifications

• Hands-on experience deploying and managing security tooling across environments.
• Experience with AWS security services and enterprise security tooling.
• Proficient in threat modelling, secure coding practices and CI/CD hardening.
• Familiarity with ISO 27001 or SOC 2 compliance and audit evidence.
• Scripting in Python or similar to automate security tasks.

Responsibilities

• Take ownership of security tooling (EDR, MDM, ZTNA) and scale as the business grows.
• Embed secure-by-design practices across the development lifecycle.
• Monitor systems for irregular behavior and design detection mechanisms.
• Ensure infrastructure aligns with OWASP Top 10 and AWS Well-Architected.
• Lead risk assessments, third-party reviews, and internal evaluations.
• Document security policies and controls for ISO 27001 ISMS.
• Collaborate with GTM/leadership to present security posture to customers.

Skills

Security tooling

AWS security

Threat modelling

CI/CD hardening

Python scripting

ISO 27001 / SOC 2 knowledge

Policy drafting

Tools

EDR

MDM

ZTNA

Vulnerability scanners

AWS security tooling

Job description

Wexler, a London-based legal AI company, seeks a hands-on security engineer to own and grow our security program spanning infrastructure, product, and compliance. You will collaborate with engineering, operations, and leadership to prove security is demonstrably strong for customers.

You will implement tooling, drive secure-by-design practices, and lead risk assessments while aligning with ISO 27001/SOC 2 standards and industry best practices.