Senior Security & Compliance Engineer

The role

You will lead technical security and own security architecture across the company's technology. This includes leading cloud and application security, embedding shift-left practices, and managing compliance and certifications.

What you will do

• Own security architecture and technical security across XYZ Reality's technology
• Continuously assess security posture and drive improvements
• Lead cloud security across infrastructure, container platforms, databases and data pipelines
• Own core security domains across identity, access, networking and data protection
• Embed security testing and shift-left practices into engineering workflows and CI/CD
• Partner with Engineering and Product on architecture and secure-by-design development
• Run threat modelling and support secure coding practices
• Own vulnerability management, triage, risk prioritisation, remediation tracking and incident response
• Own and evolve security monitoring, detection and response
• Assess emerging threats, including AI-related threats

Required qualifications

• Demonstrable in-depth hands-on technical security experience across application, cloud and/or infrastructure security
• Confidence to own security decisions end-to-end
• Strong cloud security experience with at least one major provider (Azure, AWS or GCP)
• Hands-on experience securing cloud-native and containerised environments
• Experience integrating security testing into CI/CD pipelines
• Experience securing infrastructure-as-code and GitOps workflows
• Understanding of application and API security, including modern authentication standards and secure development practices
• Experience identifying vulnerabilities, assessing technical risk and driving remediation
• Comfortable writing automation in Python, Go, Bash or similar
• Practical experience with recognised security certification frameworks
• Current knowledge of the threat landscape, particularly AI-related threats
• Strong communication skills with technical and non-technical stakeholders

Nice to have

• Experience leading or scaling security within a high-growth or Series A/B technology business

Benefits

• Hybrid working from our London office
• 25 days annual leave + public holidays
• Private healthcare with Vitality
• Additional Christmas shutdown days
• Biannual salary reviews
• Summer & Christmas company events
• Free Thursday lunch and after-work gatherings
• Employee referral scheme
• Cycle to Work scheme

About the company

XYZ Reality created the world’s first engineering-grade augmented reality for construction. The company is a Series B business growing across the US, UK and Europe.