Senior Security Engineer - REMOTE in London

You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. The roleThis role exists to ensure security incidents are rare, contained, and unsurprising.You will own the technical direction of security incident response and response readiness across the company. You will operate across endpoint, identity, cloud, and SaaS environments, working closely with Security Operations, IT, and Engineering to reduce real risk, not theoretical risk.What you’ll be responsible forIncident Response & Technical LeadershipLeading the end-to-end technical response to high-severity security incidentsOwning investigation, containment, eradication, and recovery activitiesActing as the senior technical authority during live incidentsProviding clear, decisive guidance to Security Operations under pressureCoordinating response across endpoint, identity, cloud, and SaaS platformsSupplying executives, legal, and risk stakeholders with accurate technical context and impact assessmentsEnsuring incidents are driven to resolution, not just stabilisedResponse Readiness & Proactive Risk ReductionDesigning, maintaining, and continuously improving incident response playbooks and runbooksIdentifying systemic weaknesses that increase incident likelihood or blast radius, including:Unpatched or inconsistently patched systemsExposed services and misconfigurationsDegraded or ineffective controlsUsing SIEM and security tooling to prioritise patching and vulnerability risk based on real exposure and exploitability, not CVSS scores alonePartnering with IT, Cloud, and Engineering teams to drive remediation based on business riskTracking remediation through to completion and validating effectiveness post-fixLearning, Detection, and MaturityTurning incidents, near-misses, and exposure findings into:Improved detectionsStronger preventative controlsFaster and less disruptive responseDriving readiness through simulations, tabletop exercises, and scenario testingRaising the overall maturity of the Cyber Security function by pushing advanced response and exposure management practices into BAU operationsWhat we’re looking forProven, hands-on experience leading response to real security incidentsStrong investigation capability across endpoint, identity, and cloud environmentsDemonstrated experience prioritising vulnerability or patching risk in large, complex estatesAbility to remain decisive and effective during incidents, and analytical between themClear communicator who can influence outcomes without needing direct ownership of every fixPragmatic mindset: reduce risk first, optimise laterDFIR, forensics, or malware analysis experienceProven ability to correlate vulnerability data with runtime telemetry and attacker behaviour to drive actionable risk reductionCloud-first incident response or exposure management experienceExposure to compliance-driven security requirementsExperience working alongside vulnerability scanning platforms without being constrained by themAdditional InformationBring all of you to workWe create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.