xyz-reality - Senior Security & Compliance Engineer

London Office - Hybrid2w ago

In Office Senior EMEA Cloud Computing Software Compliance Officer Security Engineer Prospecting Go GCP AWS Azure Bash Python Governance

Requirements

• Demonstrable in-depth hands-on technical security experience across application, cloud and/or infrastructure security. • The confidence to own security decisions end-to-end, not only in an advisory or governance capacity. • Strong cloud security experience with at least one major provider (Azure, AWS or GCP). • Hands-on experience securing cloud-native and containerised environments. • Experience integrating security tooling into CI/CD, including SAST, DAST, SCA and dependency scanning. • Experience securing infrastructure-as-code and GitOps workflows. • Understanding of application and API security, including modern authentication standards and secure development practices. • Experience identifying vulnerabilities, assessing technical risk and driving remediation. • Comfortable writing automation in Python, Go, Bash or similar. • Practical experience with recognised security certification frameworks. • Current knowledge of the threat landscape, particularly AI-related threats. • Strong communication skills with technical and non-technical stakeholders. • A pragmatic, collaborative approach: you know great security enables engineering teams. • Experience leading or scaling security within a high-growth or Series A/B technology business would be particularly valuable. • What You Could Be Working On • Cloud and container security architecture • Application and API security • Secure software development and shift-left security • Vulnerability management and incident response • AI-related security and emerging threats • Security certification and compliance • Security automation and CI/CD integration • Enterprise customer security requirements • XYZ Reality's longer-term security roadmap

Responsibilities

• Own security architecture and technical security across XYZ Reality's technology. • Continuously assess our security posture and drive pragmatic, prioritised improvements. • Lead cloud security across our infrastructure, including container platforms, databases and data pipelines. • Own core security domains across identity, access, networking and data protection. • Embed security testing and shift-left practices into engineering workflows and CI/CD. • Partner with Engineering and Product on architecture, technical trade-offs and secure-by-design development. • Run threat modelling and support secure coding practices across web, mobile and embedded codebases. • Own vulnerability management, including triage, risk prioritisation, remediation tracking and incident response. • Own and evolve security monitoring, detection and response. • Assess emerging threats, including those tied to AI-enabled products and tooling. • Help keep our security certifications current. • Support compliance cycles, including controls testing, evidence gathering and auditor coordination. • Support GDPR and data residency requirements across our infrastructure and data. • Engage with enterprise customers and prospects on our security posture. • Automate security controls and processes wherever possible. • Shape the standards, tooling and operating model for security as the business scales.

Benefits

• 🔐 Lead technical security, with genuine ownership over how it develops at XYZ Reality • 🏠 Hybrid working from our London office • 🏝️ 25 days annual leave + public holidays • 🩺 Private healthcare with Vitality • 🎄 Additional Christmas shutdown days • 🥳 Summer & Christmas company events • 🍣 Free Thursday lunch and after-work gatherings • 💰 Employee referral scheme • 🚲 Cycle to Work scheme • If you're an experienced security engineer who wants to shape and lead security within a growing technology business, we'd love to hear from you.