Security Lead

About the role

We are seeking a Security Lead to define and drive the security strategy for a fast‑growing, cloud‑native organization that builds cutting‑edge AI applications. This hands‑on technical leader will own security across AWS infrastructure, applications, corporate IT and operational processes while partnering closely with engineering, product and leadership teams.

Key responsibilities

• Lead and continuously improve cloud, application and corporate security across infrastructure, systems and business operations.
• Design and maintain secure AWS architectures, identity and access management, network security and configuration‑management practices.
• Drive application security initiatives, including secure development practices, threat modeling and automated security testing throughout the software development lifecycle.
• Own the incident response program: develop playbooks, coordinate response efforts and enhance threat detection and operational readiness.
• Manage vulnerability identification, prioritisation, remediation and ongoing risk reduction in collaboration with engineering teams.
• Maintain and optimise security tooling such as monitoring, logging, SIEM, alerting, endpoint protection and secrets‑management solutions.
• Collaborate with engineering and platform teams to embed security into architecture and design decisions while supporting ISO 27001 and SOC 2 compliance.
• Lead customer‑facing security reviews and continuously strengthen the organisation’s overall security posture.

Required profile

• Bachelor’s degree in Computer Science, Engineering or equivalent practical experience.
• Minimum 5 years of experience in security engineering, cloud security or application security.
• Proven ability to lead security initiatives in a remote‑first, fast‑moving environment.

Required skills

• AWS security architecture and IAM.
• Network security and DevOps environments.
• Infrastructure‑as‑code security.
• Secure software development lifecycle (SDLC) practices.
• Authentication, authorization, vulnerability management, incident response and threat detection.
• SIEM, logging, monitoring, endpoint protection and secrets‑management solutions.