Lead Security Engineer

About the role

Encord is looking for a Lead Security Engineer to own and mature the security of its people, identities, devices, and business tools. This role involves hands-on implementation of security controls, managing the organization's security program, and serving as the technical lead for ISO 27001 and SOC 2 compliance. The successful candidate will partner with DevOps and Platform teams to secure cloud environments while ensuring a smooth employee experience.

Responsibilities

• Own identity and access management including SSO, MFA, and automated lifecycle processes.
• Manage device security for the macOS fleet using MDM and EDR.
• Oversee SaaS and AI security by discovering shadow IT and setting usage guardrails.
• Protect executives and high-risk users from targeted phishing and impersonation attacks.
• Serve as the technical owner for ISO 27001 and SOC 2 controls and audits.
• Lead third-party and vendor risk assessments.
• Respond to and lead security incidents while improving detection capabilities.
• Partner with DevOps and Platform teams to secure the cloud environment.

Required skills

• Identity and Access Management
• SSO
• MFA
• MDM
• EDR
• macOS security
• SaaS security
• ISO 27001
• SOC 2
• Vendor risk assessment
• Cloud security
• GCP
• IAM
• Network segmentation
• Secrets management

Nice to have

• Terraform
• Vulnerability management
• SIEM
• SAST
• DAST
• SCA
• CI/CD pipelines
• Penetration testing
• OSINT

Benefits

• Competitive salary
• Equity
• 25 days annual leave
• UK public holidays
• Annual learning & development budget
• Travel for customer visits and events
• Company lunches
• Monthly socials
• Bi-annual team offsites

About the Company

Encord is the universal data layer for AI that helps 300+ AI teams train and run models on the right data. The company is an ambitious team of 100+ working at the frontier of AI and has raised $60M in Series C funding.