Lead Security Engineer

Overview

In this senior, hands-on leadership role you will define and evolve the organisation’s security strategy and architecture. You’ll partner with engineering, DevOps and technology leadership to embed security across the lifecycle, raise the security posture, and drive incident response maturity. You’ll translate technical risk into clear leadership recommendations while staying close to engineering work where needed. The role offers autonomy to shape security capability and navigate emerging AI/automation security considerations to protect scalable growth.

Responsibilities

• Define and evolve the security strategy and architecture for the organisation
• Provide technical leadership across cloud, application, infrastructure and data security
• Embed security across the development lifecycle with Engineering and DevOps
• Improve security posture, monitoring, detection and response capabilities
• Build and mature incident response processes and playbooks
• Establish standards around identity, access, secrets, encryption and network security
• Conduct threat modelling, risk assessments and security architecture reviews
• Assess security risks across new products, platforms and third-party integrations
• Support security governance, audit and compliance activity
• Translate technical security risks into clear recommendations for senior leadership
• Stay hands-on to challenge designs and review implementations when required
• Address security considerations around AI, agentic workflows and related tooling

Key requirements

• Strong security engineering and architecture experience
• Experience setting security strategy, standards and technical direction
• Hands-on experience building and operating security controls
• Cloud security experience
• Security monitoring and detection engineering
• DevSecOps and secure development practices
• Threat modelling and risk assessment
• Incident response
• Identity and access management
• Security governance / ISO 27001
• Excellent communication with both technical and senior stakeholders
• communication
• stakeholder management
• leadership
• cloud security
• security monitoring and detection engineering
• DevSecOps

Report this job