Senior Security Engineer (Application Security)

The role

You will own application security across Encord's platform, building secure practices into how software is designed, built and shipped. You will also set the direction for a growing security function.

What you will do

• Own the application security program end to end: threat modelling, secure design reviews, code review and vulnerability management.
• Build SAST, DAST, dependency/SCA and secrets scanning into CI/CD without slowing teams down.
• Partner with engineering on authentication, authorization, multi-tenancy isolation and data protection across APIs and SDKs.
• Lead penetration testing, bug bounty triage and incident response for application-layer issues.
• Support customer security reviews and compliance (SOC 2, HIPAA, GDPR) with practical technical controls.
• Mentor engineers and raise the security bar across the organisation.

Required qualifications

• 7+ years in software or security engineering, with significant hands-on AppSec experience.
• Strong coding ability (Python and/or TypeScript ideal) and the credibility to review and fix code.
• Deep knowledge of web and API security (OWASP Top 10, OAuth/OIDC, authz models, SSRF, injection, deserialisation).
• Experience securing cloud-native SaaS (GCP or AWS, Kubernetes, containers).
• Track record of building security tooling and processes in a fast-moving product company.
• Clear communicator who can influence engineering teams and speak to enterprise customers.

Nice to have

• Experience with ML/AI systems security (data pipelines, model supply chain, LLM-specific risks such as prompt injection).
• Background in regulated industries such as healthcare.
• Previous experience as an early or first dedicated security hire.

Benefits

• Competitive salary and meaningful equity in a high-growth startup.
• Strong in-person culture with the London office.
• 25 days annual leave plus UK public holidays.
• Annual learning and development budget.
• Travel for customer visits, events and conferences across the UK and Europe.
• Daily company lunches.
• Monthly socials and bi-annual team offsites.

Before you apply

• Most of the team works from the London office 4+ days per week.

About the company

Encord is the universal data layer for AI, helping 300+ AI teams train and run models on the right data. The company is a team of 100+ that has raised $60M in Series C funding.