# Lead Security Engineer

[Encord](https://gurify.com/jobs?q=Encord) · London · Posted yesterday

Lead

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://jobs.ashbyhq.com/encord/5c718388-17a4-4839-9556-9b39206000cd)

## Job description

### About us

Encord is the universal data layer for AI that helps 300+ AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production.

Trusted by Woven by Toyota, AXA, UiPath, Zipline, and more. We're an ambitious team of 100+ working at the frontier of AI and have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator.

### About the role

We're looking for a Lead Security Engineer to own and mature how Encord secures its people, identities, devices, and the SaaS and AI tools we run the business on. You'll be hands-on, building and running controls yourself, while also owning the organisation security programme and acting as the go-to security expert across the company.

You'll play a key role in protecting our leadership team from targeted attacks, serve as the technical backbone of our ISO 27001 and SOC 2 programmes, and partner with our DevOps and Platform teams on cloud security. Above all, you'll help us stay safe while keeping our pace.

### What you'll do

- Own identity and access across Encord, including SSO, MFA, conditional access, and automated joiner/mover/leaver processes.

- Manage our device security, keeping our macOS fleet protected through MDM and EDR.

- Run SaaS and AI security: discovering shadow IT, reviewing app permissions, assessing new tools before adoption, and setting sensible guardrails for how AI tools are used.

- Protect our executives and high-risk users from targeted phishing, impersonation, business email compromise, and AI-enabled fraud such as deepfakes.

- Act as the technical owner of our ISO 27001 and SOC 2 controls, from policies and evidence through to auditor walkthroughs.

- Lead third-party and vendor risk assessments.

- Respond to and lead security incidents, and continuously improve how we detect and handle them.

- Partner with DevOps and Platform to secure our cloud environment.

- Write clear policies and runbooks, and roll out changes in a way that keeps the employee experience smooth.

### What you'll bring

- Around 7–8 years of hands-on security experience, with a strong focus on organisation security.

- Experience rolling out or re-architecting SSO, MFA, and conditional access across a company.

- Experience deploying and managing MDM and EDR across a macOS fleet.

- A track record of building automated joiner/mover/leaver flows and user access reviews.

- Experience running SaaS security, including discovering shadow IT, reviewing app permissions, and assessing new tools before adoption.

- Experience putting guardrails around AI tool usage, such as approved tool lists, data handling rules, and vendor reviews of AI providers.

- Ownership of, or significant contribution to, ISO 27001 and/or SOC 2 audits, including policies, control evidence, and auditor walkthroughs.

- Experience defending against targeted phishing ("whaling") and business email compromise, such as fake CEO payment requests, invoice fraud, and gift card scams.

- Experience leading or supporting security incidents such as phishing compromises, account takeovers, or lost devices.

- Experience running third-party and vendor risk assessments and advising on the security of new tools before they're adopted.

- Experience partnering with DevOps/Platform teams to secure cloud environments (ideally GCP), including IAM, network segmentation, secrets management, logging, and CSPM.

- A habit of writing policies and runbooks that people can easily follow.

- A thoughtful approach to change: you've rolled out new controls with clear communication, phased approaches, and a focus on keeping the employee experience smooth.

### Nice to have

- Experience with Infrastructure-as-Code (e.g. Terraform).

- Experience owning vulnerability management across infrastructure, including scanning, prioritisation, remediation tracking, and SLAs.

- Experience building and improving detection and monitoring, centralising logs into a SIEM and defining meaningful alerts.

- Experience implementing and tuning SAST, DAST, SCA, and secrets scanning in CI/CD pipelines.

- Experience coordinating external penetration tests and bug reports, and driving fixes to closure with engineering teams.

- Experience helping engineers write secure code through guidance, patterns, and lightweight training.

- Experience supporting sales and customer trust by answering security questionnaires and joining customer security calls.

- Familiarity with executive digital protection, such as OSINT footprint reviews, impersonation monitoring, and out-of-band verification for sensitive requests.

### Why Encord

- Competitive salary, commission, and meaningful equity in a high-growth startup

- Strong in-person culture — most of the team works from our London office 4+ days/week

- 25 days annual leave + UK public holidays

- Annual learning & development budget

- Travel for customer visits, events, and conferences across the UK and Europe

- Company lunches twice a week

- Monthly socials & bi-annual team offsites

**Live in Encord’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- MA [Security Engineer](https://gurify.com/job/security-engineer-at-marex-a383676e7e6e) Marex · London, United Kingdom · last week
- XA [Infrastructure Security Engineer](https://gurify.com/job/infrastructure-security-engineer-at-xai-5df6888fa213) Xai · Dublin, United Kingdom · 5 days ago
- WR [Security engineer, detection and response (UK)](https://gurify.com/job/security-engineer-detection-and-response-uk-at-writer-9cb21b626cf6) Writer · London, United Kingdom · last week
- WR [Security engineer, application security (UK)](https://gurify.com/job/security-engineer-application-security-uk-at-writer-5099130c9e15) Writer · London, United Kingdom · last week
- TR [Senior Product Security Engineer](https://gurify.com/job/senior-product-security-engineer-at-trainline-40f1783e34dd) Trainline · London · yesterday
- DO [Cyber Security Engineer - dojo.careers](https://gurify.com/job/cyber-security-engineer-dojo-careers-0961a5dd9c92) Dojo · London · last week

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Lead Security Engineer","description":"\u003Ch3\u003EAbout us\u003C/h3\u003E\u003Cp\u003EEncord is the universal data layer for AI that helps 300\u002B AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production.\u003C/p\u003E\u003Cp\u003ETrusted by Woven by Toyota, AXA, UiPath, Zipline, and more. We\u0026#39;re an ambitious team of 100\u002B working at the frontier of AI and have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator.\u003C/p\u003E\u003Ch3\u003EAbout the role\u003C/h3\u003E\u003Cp\u003EWe\u0026#39;re looking for a Lead Security Engineer to own and mature how Encord secures its people, identities, devices, and the SaaS and AI tools we run the business on. You\u0026#39;ll be hands-on, building and running controls yourself, while also owning the organisation security programme and acting as the go-to security expert across the company.\u003C/p\u003E\u003Cp\u003EYou\u0026#39;ll play a key role in protecting our leadership team from targeted attacks, serve as the technical backbone of our ISO 27001 and SOC 2 programmes, and partner with our DevOps and Platform teams on cloud security. Above all, you\u0026#39;ll help us stay safe while keeping our pace.\u003C/p\u003E\u003Ch3\u003EWhat you\u0026#39;ll do\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EOwn identity and access across Encord, including SSO, MFA, conditional access, and automated joiner/mover/leaver processes.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EManage our device security, keeping our macOS fleet protected through MDM and EDR.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERun SaaS and AI security: discovering shadow IT, reviewing app permissions, assessing new tools before adoption, and setting sensible guardrails for how AI tools are used.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProtect our executives and high-risk users from targeted phishing, impersonation, business email compromise, and AI-enabled fraud such as deepfakes.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAct as the technical owner of our ISO 27001 and SOC 2 controls, from policies and evidence through to auditor walkthroughs.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELead third-party and vendor risk assessments.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERespond to and lead security incidents, and continuously improve how we detect and handle them.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPartner with DevOps and Platform to secure our cloud environment.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWrite clear policies and runbooks, and roll out changes in a way that keeps the employee experience smooth.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhat you\u0026#39;ll bring\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EAround 7\u20138 years of hands-on security experience, with a strong focus on organisation security.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience rolling out or re-architecting SSO, MFA, and conditional access across a company.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience deploying and managing MDM and EDR across a macOS fleet.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EA track record of building automated joiner/mover/leaver flows and user access reviews.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience running SaaS security, including discovering shadow IT, reviewing app permissions, and assessing new tools before adoption.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience putting guardrails around AI tool usage, such as approved tool lists, data handling rules, and vendor reviews of AI providers.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOwnership of, or significant contribution to, ISO 27001 and/or SOC 2 audits, including policies, control evidence, and auditor walkthroughs.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience defending against targeted phishing (\u0026quot;whaling\u0026quot;) and business email compromise, such as fake CEO payment requests, invoice fraud, and gift card scams.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience leading or supporting security incidents such as phishing compromises, account takeovers, or lost devices.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience running third-party and vendor risk assessments and advising on the security of new tools before they\u0026#39;re adopted.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience partnering with DevOps/Platform teams to secure cloud environments (ideally GCP), including IAM, network segmentation, secrets management, logging, and CSPM.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EA habit of writing policies and runbooks that people can easily follow.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EA thoughtful approach to change: you\u0026#39;ve rolled out new controls with clear communication, phased approaches, and a focus on keeping the employee experience smooth.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ENice to have\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EExperience with Infrastructure-as-Code (e.g. Terraform).\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience owning vulnerability management across infrastructure, including scanning, prioritisation, remediation tracking, and SLAs.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience building and improving detection and monitoring, centralising logs into a SIEM and defining meaningful alerts.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience implementing and tuning SAST, DAST, SCA, and secrets scanning in CI/CD pipelines.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience coordinating external penetration tests and bug reports, and driving fixes to closure with engineering teams.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience helping engineers write secure code through guidance, patterns, and lightweight training.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience supporting sales and customer trust by answering security questionnaires and joining customer security calls.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFamiliarity with executive digital protection, such as OSINT footprint reviews, impersonation monitoring, and out-of-band verification for sensitive requests.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhy Encord\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ECompetitive salary, commission, and meaningful equity in a high-growth startup\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong in-person culture \u2014 most of the team works from our London office 4\u002B days/week\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E25 days annual leave \u002B UK public holidays\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAnnual learning \u0026amp; development budget\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETravel for customer visits, events, and conferences across the UK and Europe\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECompany lunches twice a week\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMonthly socials \u0026amp; bi-annual team offsites\u003C/li\u003E\u003C/ul\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"lead-security-engineer-at-encord-691754c23bc3"},"url":"https://gurify.com/job/lead-security-engineer-at-encord-691754c23bc3","datePosted":"2026-10-02","validThrough":"2026-11-17T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Encord","sameAs":"https://jobs.ashbyhq.com/encord"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"GB","addressLocality":"London"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"United Kingdom","item":"https://gurify.com/jobs/united-kingdom"},{"@type":"ListItem","position":3,"name":"Lead Security Engineer","item":"https://gurify.com/job/lead-security-engineer-at-encord-691754c23bc3"}]}
```