Lead Security Engineer at Encord in London

Job description

About us We're solving AI's hardest problem: alignment. Encord is the data layer for Physical AI and enterprise, serving as core infrastructure for 300+ of the world's leading AI teams, including Woven by Toyota, Hitachi, Skydio, AbbVie and Dyna, Walden and Agility Robotics. From autonomous vehicles and robotics to sports and healthcare, we're solving AI's hardest problem: turning complex, real-world data into production-ready intelligent systems. We're a team of founders, scientists, quants, researchers, and former Olympians, who’ve helped build some of the most successful companies in Silicon Valley, and alumni of MIT, Stanford, UC Berkeley, Oxford, Cambridge, and Imperial. We’ve raised $110M from legendary technology investors, early backers of companies like Databricks, ElevenLabs and Vercel, and we’re growing at an extraordinary pace. We're looking for exceptional people who want to help build a category-defining company, operating with high urgency and taking real ownership to help shape the future of AI. About the role We're looking for a Lead Security Engineer to own and mature how Encord secures its people, identities, devices, and the SaaS and AI tools we run the business on. You'll be hands-on, building and running controls yourself, while also owning the organisation security programme and acting as the go-to security expert across the company. You'll play a key role in protecting our leadership team from targeted attacks, serve as the technical backbone of our ISO 27001 and SOC 2 programmes, and partner with our DevOps and Platform teams on cloud security. Above all, you'll help us stay safe while keeping our pace. What you'll do • Own identity and access across Encord, including SSO, MFA, conditional access, and automated joiner/mover/leaver processes. • Manage our device security, keeping our macOS fleet protected through MDM and EDR. • Run SaaS and AI security: discovering shadow IT, reviewing app permissions, assessing new tools before adoption, and setting sensible guardrails for how AI tools are used. • Protect our executives and high-risk users from targeted phishing, impersonation, business email compromise, and AI-enabled fraud such as deepfakes. • Act as the technical owner of our ISO 27001 and SOC 2 controls, from policies and evidence through to auditor walkthroughs. • Lead third-party and vendor risk assessments. • Respond to and lead security incidents, and continuously improve how we detect and handle them. • Partner with DevOps and Platform to secure our cloud environment. • Write clear policies and runbooks, and roll out changes in a way that keeps the employee experience smooth. What you'll bring • Around 7–8 years of hands-on security experience, with a strong focus on organisation security. • Experience rolling out or re-architecting SSO, MFA, and conditional access across a company. • Experience deploying and managing MDM and EDR across a macOS fleet. • A track record of building automated joiner/mover/leaver flows and user access reviews. • Experience running SaaS security, including discovering shadow IT, reviewing app permissions, and assessing new tools before adoption. • Experience putting guardrails around AI tool usage, such as approved tool lists, data handling rules, and vendor reviews of AI providers. • Ownership of, or significant contribution to, ISO 27001 and/or SOC 2 audits, including policies, control evidence, and auditor walkthroughs. • Experience defending against targeted phishing ("whaling") and business email compromise, such as fake CEO payment requests, invoice fraud, and gift card scams. • Experience leading or supporting security incidents such as phishing compromises, account takeovers, or lost devices. • Experience running third-party and vendor risk assessments and advising on the security of new tools before they're adopted. • Experience partnering with DevOps/Platform teams to secure cloud environments (ideally GCP), including IAM, network segmentation, secrets ma