Lead Security Engineer

Lead Security Engineer

Hybrid (London)

£77,000 + Bonus and Benefits

A well-established eComm business is building out its security engineering capability, and wants an engineer to own it. This is a build role - the controls and programmes here are early-stage, not inherited.

They're prioritising IT foundation and attitude over years in a security job title. If you came up through infrastructure, networking or identity and have moved into security, they want to hear from you.

The role

Reporting to the Information Security Manager, you'll cover a cloud-first estate spanning GCP and AWS, marketplace technology, SaaS and in-house engineering. Security maturity is early, so you'll be standing capabilities up and driving adoption, not maintaining someone else's platform.

Your first priorities:

• Asset & Application Visibility - continuous, automated discovery across the estate, from a standing start
• Zero Trust / ZTNA rollout - identity-aware access across remote and internal services
• Automating identity lifecycle (JML) in Entra ID and key SaaS platforms

Alongside that: SIEM engineering and detection tuning, vulnerability management, DLP, and incident response support - with a strong bias toward automation.

What we're looking for

• An IT infrastructure grounding - networking, endpoint, systems, identity - with a move into security. Infrastructure Engineer, Systems/IT Engineer, Cloud or Platform Engineer backgrounds all welcome
• Hands-on delivery of at least one of the three priorities above from a low-maturity start - through the deployment, tuning and adoption phases, not inheriting it already running
• Experience in a lean security or IT function where you led delivery, rather than one contributor in a large layered team
• The judgement to make sound security calls in ambiguous situations, and the communication skills to influence without authority

Depth of prior security experience matters less than the engineering foundation and the appetite to own something end to end.

Nice to have: Cloudflare (particularly Access/ZTNA); GCP or AWS security; scripting (Python, PowerShell) or Terraform; eComm or marketplace background.

On offer: real ownership with the tooling and trust behind it, AI tooling at organisation level, remote-first with flexible time at a London office, and a lean team where your decisions land.

Interested? Click APPLY NOW for immediate consideration.