Senior Security Engineer (AI & DevSecOps)

About iProov

iProov provides science-based biometric solutions that enable the world’s most security-conscious organizations to streamline secure remote onboarding and authentication for digital and physical access. Our award-winning liveness technology and iSOC offer unmatched resilience against deepfakes and generative AI threats while ensuring effortless, scalable user experiences. Trusted by leading governments and enterprises, including the U.S. Department of Homeland Security, U.K. Home Office, GovTech Singapore, ING, and UBS, iProov sets the standard in biometric identity assurance.

This global trust is built not only on our technology but on the strength of the people behind it. For us, diversity at iProov is about reflecting the customers we serve, holding the principles of equality and inclusion at the heart of everything we do and all that we stand for, embracing differences, creating possibilities, and growing together. We aim to foster a culture where individuals of all backgrounds feel confident in bringing their whole selves to work, feel included, and their talents are nurtured, empowering them to contribute fully to our purpose.

The Role

Reports to: Head of Cybersecurity
Location: WeWork Waterloo - Hybrid
Comp: $ (Base) + Company Performance Bonus (20%) + Share Options + US iProov Benefits

The role was created specifically to provide the technical security depth that will allow us to accelerate our adoption of agentic AI, equipping developers and data scientists building our biometric products with the tools and workflows to use AI safely and at pace. You will work as the direct counterpart to our GRC‑focused InfoSec Manager, owning the engineering and implementation side of our security posture across cloud infrastructure, developer workflows, AI systems, and our core security toolstack. This is a role for someone who has built and shipped software or infrastructure and brings that experience into a security context.

How you can make an impact:

• Architect and deploy the secure technical framework that governs the security controls for how our developers and scientists use agentic AI, including AI coding assistants, autonomous agents, and LLM‑integrated tooling.
• Be the primary technical security voice in decisions around the use and deployment of externally developed AI, ensuring the right controls are in place from the onset.
• Continuously mature automated security controls into CI/CD pipelines and infrastructure‑as‑code deployments, championing the DevSecOps culture across a large engineering organisation.
• Take hands‑on ownership of our core security technology stack, including Wiz, CrowdStrike, Google SecOps, and Tailscale, ensuring these platforms are correctly configured, tuned, and integrated.
• Drive continuous technical delivery of strategic security initiatives, systematically identifying, triaging, and closing gaps across our cloud environments, internal networks, and developer workflows.
• Provide technical oversight of the security of the data pipelines feeding our internal AI systems and, critically, the permissions and access boundaries of agentic AI systems reaching out into other environments.
• Complement the work of our existing biometric and product focused Red Team by owning security coverage of the DevSecOps surface, the build pipeline, internal toolchain, cloud environments and developer infrastructure.
• Act as the primary technical security partner to our GRC‑focused InfoSec Manager, translating governance and compliance mandates into concrete, automated engineering controls.
• Represent the technical security function in external audits.

Qualifications:

• A foundational background in software engineering or DevOps before moving into a dedicated security role.
• Proven, hands‑on experience securing modern cloud infrastructure and containerised environments.
• Proficiency in deploying and administering enterprise security platforms.
• A heavy and active user of AI in both professional and personal contexts.
• Scripting and automation capability, particularly in Python.
• Prior experience or a demonstrated practical interest in securing AI workloads, data pipelines, and machine learning environments.
• The communication skills to collaborate effectively with highly technical stakeholders.

Benefits:

• 25 days Annual Leave, plus 8 Bank Holidays.
• Growth Shares allocated after passing probation.
• Salary sacrifice schemes including: Pension, Cycle To Work and Electric Car Scheme.
• Work Overseas Perk - Work globally for up to 2 weeks.
• Life Assurance.
• SmartHealth - Access to private GP, Psychologist, Nutritionist along with tailored fitness plans for both you and your family.
• Benefit from personalized 1:1 career coaching with our in‑house Occupational Psychologist.
• Award winning L&D platform with personal allocated training budgets.
• Flexible hybrid working environment.

As an equal opportunities employer, we encourage applications from people of all backgrounds. We’re committed to building a workforce that is representative of the people we serve.