Senior Security & Compliance Engineer

About the role

XYZ Reality is seeking a Senior Security & Compliance Engineer to serve as the first dedicated security specialist within the business. This role involves taking ownership of security architecture, embedding shift-left security practices into engineering workflows, and strengthening the company's cloud and application security posture. The successful candidate will work directly with engineering teams to build a scalable security capability while maintaining compliance with SOC 2 Type II and ISO 27001 standards.

Responsibilities

• Take ownership of security architecture and technical security across the technology environment.
• Assess current security posture, identify vulnerabilities, and develop remediation plans.
• Architect and strengthen security across the Azure cloud environment, including Kubernetes clusters and data pipelines.
• Embed shift-left security into engineering workflows, integrating SAST, DAST, and dependency scanning into CI/CD pipelines.
• Run threat-modelling exercises and support developers with secure coding practices.
• Strengthen SOC 2 Type II and ISO 27001 controls and support compliance cycles.
• Engage with enterprise customers on security posture and requirements.

Required skills

• Azure
• Kubernetes
• Cloud security
• Application security
• CI/CD
• SAST
• DAST
• SCA
• Infrastructure-as-code
• Terraform
• Helm
• GitOps
• OAuth 2.0
• Python
• Go

Qualifications

• Practical experience working with SOC 2 Type II and/or ISO 27001
• Experience building or scaling security capability within a high-growth technology business

Benefits

• 25 days annual leave plus public holidays
• Private healthcare with Vitality
• Additional Christmas shutdown days
• Biannual salary reviews
• Summer & Christmas company events
• Free Thursday lunch
• Employee referral scheme
• Cycle to Work scheme

About the Company

XYZ Reality has created the world’s first engineering-grade Augmented Reality solution for construction. Their product, The Atom, is used on major projects worldwide to help teams build more accurately and efficiently.