Lead Security Engineer in London

Capital on Tap was founded with the mission to help small business owners and make their lives easier. Today, we provide an all-in-one business credit card & spend management platform that helps business owners save time and money. Capital on Tap proudly serves over 200,000 businesses across the world and our goal is to help 1 million small businesses by 2030.

This is a Hybrid role, the Security team works from our London Office 2 days per week.

The Role

As a Lead Security Engineer, you will be on the frontline, securing our data, systems, and operations, shaping our security measures to deter threats and safeguard our valuable assets, playing a vital role in ensuring our security monitoring and alerting capabilities are functioning effectively. Joining an existing team covering all areas of IT and Application Security.

Taking an active role to feed into the cyber security strategy and supporting the Security Engineering Manager in ensuring the policies, practices and approach to enabling a top‑class cyber security posture is fit for purpose and evolving to meet the needs of a rapidly expanding regulated business.

Responsibilities include:

• Management of the SIEM and SOC
• Identifying and implementing new log sources and use cases
• Maintaining and improving existing security tooling with the latest features
• Understanding industry trends and how they apply to our business

Experience with:

• The Microsoft security stack
• Application Security best practices
• Managing and responding to security incidents effectively
• Communication and presentation skills, tailored to the correct audiences
• Mentoring and guiding junior engineers
• A strong understanding of securing cloud technologies
• Continual learning, staying updated on emerging threats, technologies and trends
• Problem-solving and decision-making under pressure
• Understanding of ISO27001/NIST/SOC2 frameworks

We’re Looking For

This position is ideal for a skilled Security Engineer with a broad exposure across engineering, analysis, incident response and application security. Already operating at a lead/staff level or with enough experience looking to take a Lead role whilst broadening their skillset.

Required skills:

• Experience with the Microsoft security stack, with specific focus on Defender for Endpoint, Defender for Identity, Defender for Cloud, Sentinel, Entra, Azure Policy, etc.
• Experience working within the Security Incident Response Lifecycle, creating and reviewing plans and playbooks
• Reviewing and ingesting new log sources into a SIEM
• Working alongside a SOC to ensure alerts are managed effectively
• Responding to security alerts and incidents
• Carrying out post mortems and implementing lessons learned
• Experience working with and securing cloud native technologies
• Experience designing, building and maintaining security tooling
• Experience with 'defence in depth' and 'zero trust' methodologies to cyber security
• Experience with application and platform vulnerability management processes
• Able to join an Out Of Hours emergency on-call rota

Nice to have skills:

• Ability to feed into the Cyber Security Strategy
• An understanding of Cybersecurity frameworks and compliance
• Understanding of network security technologies and protocols
• Ability to work collaboratively and independently depending on the current project
• Experience or exposure to working in a regulated environment

Diversity & Inclusion

We welcome, consider and encourage applications from anyone who shares our commitment to inclusivity. Join us in creating a space where authenticity thrives, and everyone can do their best work.

Great Work Deserves Great Perks

We try not to take ourselves too seriously (all the time) so we make sure our office is decked out with a pool table, arcade machine, beer tap, and a couple of office dogs thrown in for good measure.

Check out our benefits:

• Private Healthcare including dental and opticians services through Vitality
• Worldwide travel insurance through Vitality
• Anniversary Rewards (£250, £500, £750, 4-week fully paid sabbatical)
• Salary Sacrifice Pension Scheme up to 7% match
• Octopus EV Salary Sacrifice Scheme
• 28 days holiday