Senior Security Engineer

The Opportunity This is a rare opportunity to build security from the ground up. As our first Security Engineer, you'll have significant influence over how security is implemented across the business. You'll define security standards, select and implement security tooling, improve engineering processes and work closely with development teams to embed security into our software delivery lifecycle. This is not a governance-only role. We're looking for an engineer who enjoys writing code, automating security, working in cloud infrastructure and solving complex technical problems. You'll split your time between improving our security posture and contributing directly to our cloud platform and engineering systems. If you enjoy building rather than policing, you'll fit in well here. What You'll Do Build our Security Capability Develop and evolve the company's security strategy alongside the Head of Security&Cloud Platforms.Design practical security controls that support engineering velocity.Establish security standards, policies and technical guardrails.Introduce security metrics and reporting. Build Security into our Platform Design secure cloud architectures.Improve identity and access management.Secure Kubernetes workloads and cloud infrastructure.Build automated security controls into CI/CD pipelines.Improve secrets management.Develop security automation and tooling. Security Tooling Evaluate, implement and manage technologies such as: Vulnerability ManagementSAST / DAST / SCAContainer SecurityCSPMCloud Detection&ResponseSIEM / LoggingEndpoint Detection&ResponseSecrets ManagementInfrastructure ScanningSupply Chain Security The expectation is not that every tool already exists—you'll help determine what we should use. Engineering You'll remain a hands-on engineer and contribute to the wider platform by: Building automationImproving developer experienceSupporting platform engineering initiativesContributing to infrastructure as codeReviewing architecture and designs Security Operations Lead vulnerability remediation initiatives.Improve incident response processes.Support security investigations.Run threat modelling exercises.Coordinate penetration testing.Improve monitoring and detection capabilities. What We're Looking For We're less interested in ticking every box than finding someone who enjoys solving difficult technical problems. You'll probably have experience in many of these areas: Cloud AWS (preferred)KubernetesDockerTerraformInfrastructure as Code Security Cloud SecurityApplication SecuritySecure SDLCIAMVulnerability ManagementSecurity Automation DevSecOps Experience integrating security into: GitHub Actions / Azure DevOps / GitLabCI/CD pipelinesAutomated testingInfrastructure deploymentPolicy as Code What Success Looks Like After your first year you will have: Established the foundations of Oneiro's security programme.Embedded security into our engineering lifecycle.Implemented a pragmatic set of security tools.Reduced engineering friction through automation.Improved visibility across our cloud estate.Helped shape the long-term security strategy.Become a trusted technical advisor to engineering teams.Delivered meaningful improvements to the platform itself. How We Work We value engineers who: Take ownership.Automate repetitive work.Prefer collaboration over gatekeeping.Make pragmatic, risk-based decisions.Continuously learn and improve.Communicate clearly with both engineers and non-technical stakeholders. You'll work closely with Engineering, Platform, Product and Leadership teams, helping everyone build secure systems without slowing innovation. Why Join Oneiro? You'll be joining at a pivotal stage in our growth. Rather than inheriting years of technical debt and legacy processes, you'll help define how security is done across the organisation. You'll have genuine ownership, significant technical freedom and the opportunity to build a modern security function that engineering teams genuinely enjoy working with. This is an opportunity to leave a lasting mark on both our platform and our culture.