Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 25 hours ago

Lead Security Engineer

Encord44 open roles

Where
London
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead Security EngineerEncord · London

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Encord's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market. Encord postings stay open a median of 8 days.

Share of postings closed within
  1. 1.7%1 day
  2. 3.5%3 days
  3. 7.8%7 days
  4. 14.6%14 days
  5. 34.1%30 days
This job: posted 25 hours ago

Encord median: 8 days open

The posting

About us

Encord is the universal data layer for AI that helps 300+ AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production.

Trusted by Woven by Toyota, AXA, UiPath, Zipline, and more. We're an ambitious team of 100+ working at the frontier of AI and have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator.

About the role

We're looking for a Lead Security Engineer to own and mature how Encord secures its people, identities, devices, and the SaaS and AI tools we run the business on. You'll be hands-on, building and running controls yourself, while also owning the organisation security programme and acting as the go-to security expert across the company.

You'll play a key role in protecting our leadership team from targeted attacks, serve as the technical backbone of our ISO 27001 and SOC 2 programmes, and partner with our DevOps and Platform teams on cloud security. Above all, you'll help us stay safe while keeping our pace.

What you'll do

- Own identity and access across Encord, including SSO, MFA, conditional access, and automated joiner/mover/leaver processes.

- Manage our device security, keeping our macOS fleet protected through MDM and EDR.

- Run SaaS and AI security: discovering shadow IT, reviewing app permissions, assessing new tools before adoption, and setting sensible guardrails for how AI tools are used.

- Protect our executives and high-risk users from targeted phishing, impersonation, business email compromise, and AI-enabled fraud such as deepfakes.

- Act as the technical owner of our ISO 27001 and SOC 2 controls, from policies and evidence through to auditor walkthroughs.

- Lead third-party and vendor risk assessments.

- Respond to and lead security incidents, and continuously improve how we detect and handle them.

- Partner with DevOps and Platform to secure our cloud environment.

- Write clear policies and runbooks, and roll out changes in a way that keeps the employee experience smooth.

What you'll bring

- Around 7–8 years of hands-on security experience, with a strong focus on organisation security.

- Experience rolling out or re-architecting SSO, MFA, and conditional access across a company.

- Experience deploying and managing MDM and EDR across a macOS fleet.

- A track record of building automated joiner/mover/leaver flows and user access reviews.

- Experience running SaaS security, including discovering shadow IT, reviewing app permissions, and assessing new tools before adoption.

- Experience putting guardrails around AI tool usage, such as approved tool lists, data handling rules, and vendor reviews of AI providers.

- Ownership of, or significant contribution to, ISO 27001 and/or SOC 2 audits, including policies, control evidence, and auditor walkthroughs.

- Experience defending against targeted phishing ("whaling") and business email compromise, such as fake CEO payment requests, invoice fraud, and gift card scams.

- Experience leading or supporting security incidents such as phishing compromises, account takeovers, or lost devices.

- Experience running third-party and vendor risk assessments and advising on the security of new tools before they're adopted.

- Experience partnering with DevOps/Platform teams to secure cloud environments (ideally GCP), including IAM, network segmentation, secrets management, logging, and CSPM.

- A habit of writing policies and runbooks that people can easily follow.

- A thoughtful approach to change: you've rolled out new controls with clear communication, phased approaches, and a focus on keeping the employee experience smooth.

Nice to have

- Experience with Infrastructure-as-Code (e.g. Terraform).

- Experience owning vulnerability management across infrastructure, including scanning, prioritisation, remediation tracking, and SLAs.

- Experience building and improving detection and monitoring, centralising logs into a SIEM and defining meaningful alerts.

- Experience implementing and tuning SAST, DAST, SCA, and secrets scanning in CI/CD pipelines.

- Experience coordinating external penetration tests and bug reports, and driving fixes to closure with engineering teams.

- Experience helping engineers write secure code through guidance, patterns, and lightweight training.

- Experience supporting sales and customer trust by answering security questionnaires and joining customer security calls.

- Familiarity with executive digital protection, such as OSINT footprint reviews, impersonation monitoring, and out-of-band verification for sensitive requests.

Why Encord

- Competitive salary, commission, and meaningful equity in a high-growth startup

- Strong in-person culture — most of the team works from our London office 4+ days/week

- 25 days annual leave + UK public holidays

- Annual learning & development budget

- Travel for customer visits, events, and conferences across the UK and Europe

- Company lunches twice a week

- Monthly socials & bi-annual team offsites

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Encord's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Encord's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Encord's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.