# Lead Cloud Security Engineer

[Encord](https://gurify.com/jobs?q=Encord) · London · Posted yesterday

Lead

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://jobs.ashbyhq.com/encord/464595db-7142-481c-b23c-712fa72a7eb3)

## Job description

### ABOUT US

Encord is the universal data layer for AI that helps 300+ AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production.

Trusted by Woven by Toyota, AXA, UiPath, Zipline, and more. We're an ambitious team of 100+ working at the frontier of AI and have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator.

### THE ROLE

Encord handles sensitive, high-value data for our customers, including in regulated industries like healthcare. In an era where exploits and supply-chain attacks are being discovered and executed faster than ever, it's vital that we stay on the cutting edge of keeping our systems and our customers' data safe.

Hardening our systems is only part of the solution. As we scale into more industries with their diverse security and regulatory requirements, we want someone who can help us attain and maintain higher levels of compliance certification.

### WHAT WE'RE LOOKING FOR

We're hiring at both Level 3 (Senior) and Level 4 (Staff). For calibration, candidates typically bring 5+ years of platform engineering experience in high-growth, cloud-native SaaS environments, but we care more about impact than years. We're looking for that "T"-shaped skillset where the candidate's depth is in Cloud Security.

The ideal candidate will have a product, infrastructure or network engineering background but caught the bug for security, and cares deeply about enabling people to work fast, safely. Finally, we're looking for someone who sees security as an enabler and force-multiplier, someone who answers questions with a "Here's how we do it securely."

WHAT CAN YOU EXPECT?

- A strong team. You'll join a team of senior and staff engineers who set a high bar and will push you to do your best work.

- Modern, cloud-native stack. Cloud-native and IaC-driven: GCP and Terraform, with TypeScript/Python across the stack.

- Scalability challenges. As we scale, you'll help evolve our infrastructure to defend against new threats and keep us one step ahead.

- Customer impact. Delivering on our compliance goals and successfully handling audits.

- Massive ownership. You own problems end-to-end, from brainstorming through to production, and you thrive in ambiguity.

- Collaboration & autonomy. Plenty of heads-down technical work, but also close partnership with product engineers and engineering leadership.

### ABOUT YOU

- Cloud security specialist. Deep knowledge of GCP: IAM, VPC and networking, firewall and perimeter controls, KMS, secrets management, logging/monitoring, and org-level policy. You understand cloud-native architectures and their trade-offs.

- Network security depth. You understand network segmentation, private connectivity, zero-trust patterns, TLS/mTLS, and how to secure traffic between services and to the outside world.

- Platform engineer & builder. You design reliable infrastructure and write clean production code. You've built and maintained CI/CD pipelines, IaC (Terraform), and security gates at scale.

- Security as an enabler. You treat engineers and the business as your customers. You automate toil, improve feedback loops, and care deeply about making other people productive.

- Commercially minded. You understand that infrastructure and security exist to serve the product and the business, and you make trade-offs with that in mind.

- Bias for action. You iterate quickly, ship pragmatically, and automate everything.

### NICE-TO-HAVES

- Experience securing other cloud providers (AWS, Azure) or on-premise / hybrid environments, so we can meet our customers wherever they run.

- ISC2 (any level) or relevant cloud security certification (e.g. GCP Professional Cloud Security Engineer).

- Experience with SaaS compliance programs (ISO 27001, SOC 2 Type II, HIPAA).

- Open-source contributions to security, infrastructure, or developer-tooling projects.

### WHY ENCORD

- Competitive salary, commission, and meaningful equity in a high-growth startup

- Strong in-person culture: most of the team works from our London office 4+ days/week

- 25 days annual leave + UK public holidays

- Annual learning & development budget

- Travel for customer visits, events, and conferences across the UK and Europe

- Daily company lunches

- Monthly socials & bi-annual team offsites

### OPERATING PRINCIPLES

### HIGH AGENCY

You see something broken, you fix it or find the person who can. We celebrate the people who solve 90% of a problem before anyone asks.

### Build with care & urgency

We bear-hug the customer. Former founders and people from fast-moving, high-stakes environments thrive here.

### Self-aware & hungry

We stay warm, self-aware, and genuinely hungry. We elevate our peers, and ego doesn't last long.

### Invent in real time

We move toward the ambiguity. We’re pragmatic, resourceful, energized by the fact that there's no playbook.

If you're looking to do the most meaningful work of your career alongside people who push you to be better, we'd love to meet you.

**Live in Encord’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- EN [Lead Security Engineer (Application Security)](https://gurify.com/job/lead-security-engineer-application-security-at-encord-982286c0b753) Encord · London · yesterday
- BJ [Cloud Infrastructure Security Engineer](https://gurify.com/job/cloud-infrastructure-security-engineer-at-bjak-2207deca3ccc) Bjak · United Kingdom · last week
- EN [Lead Security Engineer](https://gurify.com/job/lead-security-engineer-at-encord-691754c23bc3) Encord · London · 6 weeks ago
- WR [Security engineer, application security (UK)](https://gurify.com/job/security-engineer-application-security-uk-at-writer-3e2e8f916112) Writer · London, United Kingdom · last week
- KA [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-kaluza-cabedbdb0af6) Kaluza · Bristol, United Kingdom · last week
- OR [Product Security Engineer](https://gurify.com/job/product-security-engineer-at-orbital-82af6a8465a0) Orbital · London · 2 days ago

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Lead Cloud Security Engineer","description":"\u003Ch3\u003EABOUT US\u003C/h3\u003E\u003Cp\u003EEncord is the universal data layer for AI that helps 300\u002B AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production.\u003C/p\u003E\u003Cp\u003ETrusted by Woven by Toyota, AXA, UiPath, Zipline, and more. We\u0026#39;re an ambitious team of 100\u002B working at the frontier of AI and have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator.\u003C/p\u003E\u003Ch3\u003ETHE ROLE\u003C/h3\u003E\u003Cp\u003EEncord handles sensitive, high-value data for our customers, including in regulated industries like healthcare. In an era where exploits and supply-chain attacks are being discovered and executed faster than ever, it\u0026#39;s vital that we stay on the cutting edge of keeping our systems and our customers\u0026#39; data safe.\u003C/p\u003E\u003Cp\u003EHardening our systems is only part of the solution. As we scale into more industries with their diverse security and regulatory requirements, we want someone who can help us attain and maintain higher levels of compliance certification.\u003C/p\u003E\u003Ch3\u003EWHAT WE\u0026#39;RE LOOKING FOR\u003C/h3\u003E\u003Cp\u003EWe\u0026#39;re hiring at both Level 3 (Senior) and Level 4 (Staff). For calibration, candidates typically bring 5\u002B years of platform engineering experience in high-growth, cloud-native SaaS environments, but we care more about impact than years. We\u0026#39;re looking for that \u0026quot;T\u0026quot;-shaped skillset where the candidate\u0026#39;s depth is in Cloud Security.\u003C/p\u003E\u003Cp\u003EThe ideal candidate will have a product, infrastructure or network engineering background but caught the bug for security, and cares deeply about enabling people to work fast, safely. Finally, we\u0026#39;re looking for someone who sees security as an enabler and force-multiplier, someone who answers questions with a \u0026quot;Here\u0026#39;s how we do it securely.\u0026quot;\u003C/p\u003E\u003Cp\u003EWHAT CAN YOU EXPECT?\u003C/p\u003E\u003Cul\u003E\u003Cli\u003EA strong team. You\u0026#39;ll join a team of senior and staff engineers who set a high bar and will push you to do your best work.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EModern, cloud-native stack. Cloud-native and IaC-driven: GCP and Terraform, with TypeScript/Python across the stack.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EScalability challenges. As we scale, you\u0026#39;ll help evolve our infrastructure to defend against new threats and keep us one step ahead.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECustomer impact. Delivering on our compliance goals and successfully handling audits.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMassive ownership. You own problems end-to-end, from brainstorming through to production, and you thrive in ambiguity.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECollaboration \u0026amp; autonomy. Plenty of heads-down technical work, but also close partnership with product engineers and engineering leadership.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EABOUT YOU\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ECloud security specialist. Deep knowledge of GCP: IAM, VPC and networking, firewall and perimeter controls, KMS, secrets management, logging/monitoring, and org-level policy. You understand cloud-native architectures and their trade-offs.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ENetwork security depth. You understand network segmentation, private connectivity, zero-trust patterns, TLS/mTLS, and how to secure traffic between services and to the outside world.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPlatform engineer \u0026amp; builder. You design reliable infrastructure and write clean production code. You\u0026#39;ve built and maintained CI/CD pipelines, IaC (Terraform), and security gates at scale.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESecurity as an enabler. You treat engineers and the business as your customers. You automate toil, improve feedback loops, and care deeply about making other people productive.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECommercially minded. You understand that infrastructure and security exist to serve the product and the business, and you make trade-offs with that in mind.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBias for action. You iterate quickly, ship pragmatically, and automate everything.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ENICE-TO-HAVES\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EExperience securing other cloud providers (AWS, Azure) or on-premise / hybrid environments, so we can meet our customers wherever they run.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EISC2 (any level) or relevant cloud security certification (e.g. GCP Professional Cloud Security Engineer).\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with SaaS compliance programs (ISO 27001, SOC 2 Type II, HIPAA).\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOpen-source contributions to security, infrastructure, or developer-tooling projects.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWHY ENCORD\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ECompetitive salary, commission, and meaningful equity in a high-growth startup\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong in-person culture: most of the team works from our London office 4\u002B days/week\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E25 days annual leave \u002B UK public holidays\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAnnual learning \u0026amp; development budget\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETravel for customer visits, events, and conferences across the UK and Europe\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDaily company lunches\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMonthly socials \u0026amp; bi-annual team offsites\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EOPERATING PRINCIPLES\u003C/h3\u003E\u003Ch3\u003EHIGH AGENCY\u003C/h3\u003E\u003Cp\u003EYou see something broken, you fix it or find the person who can. We celebrate the people who solve 90% of a problem before anyone asks.\u003C/p\u003E\u003Ch3\u003EBuild with care \u0026amp; urgency\u003C/h3\u003E\u003Cp\u003EWe bear-hug the customer. Former founders and people from fast-moving, high-stakes environments thrive here.\u003C/p\u003E\u003Ch3\u003ESelf-aware \u0026amp; hungry\u003C/h3\u003E\u003Cp\u003EWe stay warm, self-aware, and genuinely hungry. We elevate our peers, and ego doesn\u0026#39;t last long.\u003C/p\u003E\u003Ch3\u003EInvent in real time\u003C/h3\u003E\u003Cp\u003EWe move toward the ambiguity. We\u2019re pragmatic, resourceful, energized by the fact that there\u0026#39;s no playbook.\u003C/p\u003E\u003Cp\u003EIf you\u0026#39;re looking to do the most meaningful work of your career alongside people who push you to be better, we\u0026#39;d love to meet you.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"lead-cloud-security-engineer-at-encord-fdddf261550a"},"url":"https://gurify.com/job/lead-cloud-security-engineer-at-encord-fdddf261550a","datePosted":"2026-11-12","validThrough":"2026-12-28T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Encord","sameAs":"https://jobs.ashbyhq.com/encord"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"GB","addressLocality":"London"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"United Kingdom","item":"https://gurify.com/jobs/united-kingdom"},{"@type":"ListItem","position":3,"name":"Lead Cloud Security Engineer","item":"https://gurify.com/job/lead-cloud-security-engineer-at-encord-fdddf261550a"}]}
```