Security Engineer

Support data security controls for the petabyte-scale multimodal data sets that customers entrust to our platform.

Incident Response & Operations

• Participate in incident response activities, including investigation, containment, and recovery efforts

• Provide technical expertise and guidance to IT and network engineering teams to ensure security controls are effectively implemented and maintained

**Compliance & Risk **

• Support Encord's SOC 2 Type II, ISO 27001, and customer compliance programmes, including evidence collection and control implementation.

• Contribute to third-party vendor and supply-chain risk assessments.

• Help maintain and improve security policies, runbooks, and documentation.

Reporting & Documentation

• Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancements

• Stay up-to-date with the latest information security technologies and advancements

• Train staff on network and information security procedures

What we're looking for

• Hands-on and thorough — you have 3–4 years of experience in a security engineering, application security, or cloud security role and are comfortable owning work end-to-end

• Cloud-native mindset — you have strong working knowledge of cloud security on AWS or GCP

• Security-first engineer — you understand application security concepts including OWASP Top 10, common API vulnerabilities, and authentication/authorisation flaws

• Technically grounded — you’re comfortable reading and reviewing code in at least one programming language (Python or TypeScript preferred)

• Clear communicator — you can translate technical risk into business impact for non- security audiences

• Bonus: experience securing containerised environments, familiarity with AI/ML security concepts, or certifications such as OSCP, AWS Security Specialty, CCSP, or CEH

Experience requirements

• 3–4 years of hands-on experience in a security engineering, application security, or cloud security role

• Strong working knowledge of cloud security on AWS or GCP

• Experience with application security concepts: OWASP Top 10, common API vulnerabilities, authentication/authorisation flaws

• Practical experience with security tooling: SAST/DAST scanners and vulnerability management platforms

• Comfortable reading and reviewing code in at least one programming language (Python or TypeScript preferred)

• Bonus: experience securing containerised environments (Docker, Kubernetes) and CI/CD pipelines, familiarity with data security or privacy regulations relevant to AI/ML workloads, or security certifications such as OSCP, AWS Security Specialty, CCSP, or CEH

Why Encord

• Competitive salary, commission, and meaningful equity in a high-growth startup

• Strong in-person culture — most of the team works from our London office 4+ days/week

• 25 days annual leave + UK public holidays

• Annual learning & development budget

• Travel for customer visits, events, and conferences across the UK and Europe

• Company lunches twice a week

• Monthly socials & bi-annual team offsites

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.