Senior Security Engineer in London

• We are hiring a Senior Security Engineer to protect the people, infrastructure, and tooling that goes into building and hosting Mattermost
• This is a hands-on, high-impact role at the intersection of enterprise security engineering, cloud information security, and AI-enabled threat response
• As a Senior Security Engineer, you will lead the design and implementation of security tooling, harden our cloud and IT infrastructure, and serve as a key responder to incidents. You will work across a globally distributed team and partner closely with Engineering to manage AI-enabled risk
• Lead security and IT projects to enhance the security posture of infrastructure and the company
• Detect, investigate, and remediate security incidents using SIEM, EDR, and SOAR tooling (e.g. CrowdStrike, SentinelOne)
• Conduct threat hunting across cloud and endpoint environments using a Zero Trust framework
• Administer company-wide IAM and security monitoring infrastructure
• Contribute to security policies, incident response, forensics, and endpoint management programmes
• Partner with Engineering to assess and mitigate risks from AI-enabled tools and workflows
• Explore and implement AI/automation in detection, analysis, and response pipelines
• Engage closely with North American and international staff across time zones

Benefits

• Fully remote work
• Office setup fund
• Coworking space stipend
• Global and regional team meetups
• Growth fund
• Unlimited vacation
• Family and Friends Days
• Async weeks
• Health benefits
• 401(k)
• Pension
• Open Source Fridays
• Community hackathons and events

• Experience with IAM solutions and infrastructure automation
• Practical experience evaluating security implications of AI systems and AI-assisted workflows
• Experience with cloud security controls across AWS, GCP, and/or Azure
• 3+ years of hands-on experience in security engineering and incident response
• Bachelor’s degree in Computer Science or a related field, or significant professional security experience
• Knowledge of SOAR platforms and automation of security workflows
• Excellent written and verbal communication skills
• Experience with EDR tools such as CrowdStrike or SentinelOne
• Strong knowledge of Linux systems and Kubernetes/Docker environments
• Experience with SIEM platforms and security monitoring systems
• Experience managing security of Microsoft 365 and Google Workspace tenants
• Familiarity with Zero Trust architecture principles and threat hunting methodologies
• Experience with certification processes: SOC2, ISO 27001, FedRAMP, or Cyber Essentials Plus
• Certifications: OSCP, GCIH, GCFA, or equivalent penetration testing / incident response credentials
• Background in open-source communities
• Experience in Go or Python
• Endpoint security management experience in a fully remote organisation

#J-18808-Ljbffr