data engineer

software engineer

ai engineer

senior software engineer

full stack engineer

information security engineer

AJ Bell

<div>Job Description 
Due to growth within our security engineering department we are now looking for a Principal Information Security Engineer to join the team. The role will support the Senior Information Security Engineering Manager by providing technical leadership and oversight across the Information Security Engineering team.
This role is responsible for the day-to-day technical execution by our security engineering team, ensuring that project engagements are delivered to a high standard and support activities are dealt with in line with organisational SLAs.
You will act as the team&rsquo;s primary technical lead and escalation point, driving efficiency, validating designs, and ensuring that all engineering outputs remain consistent and aligned with the security strategy.
The key responsibilities of the role are:<ul><li>
Act as the primary technical escalation point for the team, providing hands-on guidance and decision-making for complex technical challenges.</li><li>
Oversee the day-to-day execution of security engineering, ensuring that BAU work is delivered to high standards and that all team SLAs are consistently met.</li><li>
Ensure the quality and consistency of engineering outputs, specifically for project engagements, technical tasks, and documentation, ensuring they align with established security standards.</li><li>
Support the technical delivery of our security tooling roadmap, helping to bridge the gap between high-level strategic objectives and operational outcomes.</li><li>
Work closely with the Information Security Architecture team to validate design concepts, ensuring solutions are robust, scalable, and fit for our enterprise environment.</li><li>
Collaborate with the Information Security Operations team to drive operational efficiency, quality improvements, and the seamless integration of security controls across the estate.</li><li>
Provide technical leadership and mentoring to the engineering team, ensuring they have the support and direction needed to deliver secure, automated, and effective solutions</li></ul>
Technical Skills:<ul><li>
Demonstrable experience implementing enterprise security platforms</li><li>
Strong hands-on experience with of Microsoft security stack</li><li>
Strong hands-on experience using, managing, and securing diverse end-user compute environments, including Windows, MacOS, Linux, and mobile device platforms.</li><li>
Knowledge/experience working with firewalls and cloud security solutions is highly advantageous</li><li>
Deep understanding of Information Security solutions e.g. email / web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protection</li><li>
Strong understanding and knowledge of Information Security risk management tools and techniques.</li><li>
Awareness of Information Security control standards and frameworks</li><li>
Knowledge/experience working with firewalls and cloud security solutions is highly advantageous.</li><li>
Knowledge/experience working with firewalls is highly advantageous</li><li>
Experience of Cloud security solutions and standards is highly advantageous</li><li>
Hands-on experience with automation and scripting highly desirable</li></ul>
Competence, knowledge and skills
Competence<ul><li>
Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc.</li><li>
5 years&rsquo; experience in an Information Security role gained in a financial services or e-commerce environment is preferred</li></ul>
Knowledge &amp; Skills<ul><li>
Significant experience in the area of Information Technology (IT) security</li><li>
Strong knowledge of core IT and networking concepts</li><li>
Well versed in IT security capabilities, framework and concepts</li><li>
Extensive experience implementing industry-standard IT security platforms</li><li>
Strong ownership of tasks, attention to detail and following through to conclusion</li><li>
Ability to challenge approach, strategy and implementation to ensure Information Security is consistently considered and improved</li><li>
Ability to work under own initiative to plan and communicate effectively with colleagues and customers</li><li>
Structured, self-starting, flexible and enjoy working in fast-paced environments</li><li>
Effective communication skills, both written and verbal</li><li>
Ability to plan, organise and follow through on assigned tasks and complete with little or no prompting from management</li><li>
Excellent attention to detail</li><li>
Attained or working towards CISSP certification</li></ul>
About AJ Bell
At AJ Bell, we believe investing should feel good. Whether you're looking for an ISA, pension or dealing account, whether you want to invest with the help of a financial adviser or do it yourself, we have easy-to-use solutions to suit people from all walks of life.
We're one of the UK's fastest-growing investment platform businesses, trusted by everyone from professional financial advisers to first-time investors.
Today, over 723,000 customers trust us to manage more than &pound;108.7 billion of assets. By continually striving to make investing simpler and more accessible, we're helping more people take control of their financial futures.
We're proud to be recognised as one of the UK's Best 100 Companies to Work For for six consecutive years, and a Great Place to Work&reg; in 2025 and 2026, a reflection of our supportive and collaborative culture.
What we offer<ul><li>
Competitive starting salary</li><li>
26 days holiday, increasing with service + buy/sell scheme + bank holidays</li><li>
7% Pension with matched contributions</li><li>
Discretionary bonus scheme</li><li>
Share schemes (including free shares and BAYE)</li><li>
Health Cash Plan and discounted private healthcare</li><li>
Free gym</li><li>
Enhanced family leave (subject to qualifying criteria)</li><li>
Travel and bike loan schemes</li><li>
Employee Assistance Programme</li></ul>
Life at AJ Bell<ul><li>
Regular social events including summer and Christmas parties</li><li>
Learning and development opportunities tailored to you</li><li>
Casual dress code</li><li>
Friendly, supportive team environment</li></ul>
Our ways of working
At AJ Bell, our people are the heart of our culture. We believe in building strong connections by working together. That's why we offer a hybrid working model, where you'll spend a minimum of 50% of working time per month in the office. For new team members, an initial period will be spent full-time in the office to help you immerse yourself in our business and build valuable relationships with your colleagues.
Inclusion &amp; diversity
We&rsquo;re committed to creating an inclusive environment where everyone feels respected, supported and able to be themselves at work.
We welcome applications from all backgrounds and make hiring decisions based on skills, experience and potential.
Agency information
This vacancy is being managed exclusively by our in-house Recruitment team. We are not partnering with recruitment agencies on this opportunity and will only accept applications submitted directly by candidates.</div>

Principal Information Security Engineer

gelato

<div><h2 class="jobSectionHeader">About Gelato</h2>
Gelato has created the world&rsquo;s largest global network for on-demand production of custom products &ndash; from t-shirts and mugs to books and wall art. We empower a new generation of ecommerce entrepreneurs to share their creativity worldwide while embracing local, sustainable production. By producing locally and perfectly matching supply with demand, we eliminate waste and reduce carbon emissions.
At Gelato, we don&rsquo;t own production facilities &ndash; we build the software that connects them. With over 140 production partners in 32 countries, our network can deliver custom products to five billion people in just 72 hours. It&rsquo;s smarter, faster, and greener.
With GelatoConnect, our SaaS platform, we&rsquo;re driving innovation in print production. GelatoConnect simplifies operations for print producers by automating procurement, workflows, and logistics into one seamless system. By boosting efficiency and cutting costs, it helps businesses scale to meet market demands. With GelatoConnect, we&rsquo;re reshaping the print industry to be more efficient, sustainable, and profitable.<h2 class="jobSectionHeader">
Platform</h2>
Gelato is an AI-first, cloud-native platform transforming local, on-demand production and delivery &mdash; with zero physical assets. We power:<ul><li>
Global production orchestration: connecting e-commerce customers to 130+ partners across 32 countries. From AI-guided design to smart routing and logistics, we deliver to over 5 billion people in under 72 hours &mdash; faster, greener, smarter.</li><li>
GelatoConnect: our AI-driven print production OS that helps producers master digital printing &mdash; from inventory to shipping &mdash; by automating every step: procurement, prepress, printing, packaging, and dispatch.</li></ul><h2 class="jobSectionHeader">
AI at the core</h2>
We are not just early adopters of AI &mdash; we&rsquo;re AI-native builders. Security at Gelato is no different: we don&rsquo;t just use AI tools, we build them into everything we do.<ul><li>
AI-first security operations using LLMs for alert triage, threat summarisation, runbook drafting, and incident documentation.</li><li>
Autonomous AI agents driving detection, alerting, and response orchestration across our security tooling.</li><li>
A culture of continuous experimentation &mdash; we actively encourage using AI to go further, faster, without cutting corners on rigour.</li></ul><h2 class="jobSectionHeader">
The position</h2>
As Gelato continues its global expansion, we are seeking an Automation Engineer to join our growing security function. This is a hands-on, builder-focused role centred on designing, building, and shipping the AI and automation that multiplies what our security team can do. Rather than triaging alerts by hand, you&rsquo;ll build the systems that triage them.
Working closely with the Head of Information Security and the wider security team, you&rsquo;ll turn manual, repetitive security work into reliable automated workflows and intelligent agents. You&rsquo;ll integrate our security tooling, wire up LLM-driven pipelines, and create the automation that keeps the business safe at scale.
You don&rsquo;t need to have built everything before. You need strong engineering instincts, genuine curiosity, and the drive to ship. You&rsquo;ll have a clear path to grow your skills across security engineering, AI/agent development, and detection-and-response automation.
Our security team operates as enablers, not blockers &mdash; your job is to build the tooling that keeps the business safe without slowing it down.<h2 class="jobSectionHeader">
Responsibilities</h2><h3 class="jobSectionHeader">
Security automation engineering</h3><ul><li>
Design, build, and maintain automation that removes manual toil across detection, triage, response, and reporting.</li><li>
Integrate security tooling (SIEM, EDR, IAM, cloud, ticketing) into seamless, reliable automated workflows.</li><li>
Build and maintain SOAR-style playbooks and pipelines for enrichment, containment, and response.</li><li>
Own the deployment, monitoring, and reliability of the automation you ship.</li></ul><h3 class="jobSectionHeader">
AI and agent development</h3><ul><li>
Build LLM-powered tools and autonomous agents for alert triage, threat summarisation, runbook generation, and incident documentation.</li><li>
Develop and refine prompts, guardrails, and evaluations to make AI workflows safe and dependable in production.</li><li>
Prototype, test, and ship AI-assisted approaches to threat hunting, log analysis, and security operations.</li></ul><h3 class="jobSectionHeader">
Tooling and integrations</h3><ul><li>
Develop integrations and APIs that connect security tools to internal systems and data sources.</li><li>
Write clean, maintainable, well-tested code.</li><li>
Maintain and improve internal libraries, documentation, and shared automation infrastructure.</li></ul><h3 class="jobSectionHeader">
Collaboration and enablement</h3><ul><li>
Partner with the security team to identify the highest-leverage automation opportunities.</li><li>
Document workflows clearly so the team can operate, trust, and extend what you build.</li><li>
Automate evidence collection and control testing for compliance frameworks including ISO 27001, SOC 2, and NIST CSF.</li></ul><h2 class="jobSectionHeader">
Requirements</h2><ul><li>
2&ndash;4 years of experience in software engineering, automation/DevOps, security engineering, or a related hands-on building role &mdash; including internships, apprenticeships, or equivalent practical exposure.</li><li>
Strong scripting and programming skills, particularly in Python, with a track record of building integrations against APIs.</li><li>
Experience building automation workflows &mdash; whether through SOAR platforms, CI/CD, or workflow orchestration tools (e.g. n8n, Tines, Zapier).</li><li>
AI-native working style &mdash; practical, hands-on experience building with LLMs (APIs, prompt engineering, and ideally agents), not just using them as a chat assistant.</li><li>
Comfortable working in cloud environments, particularly AWS &mdash; you understand IAM, logging, and serverless or container-based deployment.</li><li>
A solid grasp of core security concepts (the incident response lifecycle, common vulnerability classes, attack frameworks such as MITRE ATT&amp;CK), or the curiosity and drive to ramp up quickly.</li><li>
Clear written and verbal communication in English; able to document systems and decisions for both technical and non-technical audiences.</li></ul><h2 class="jobSectionHeader">
Good to have</h2><ul><li>
Experience with SOAR or workflow-automation platforms (Tines, Torq, n8n, or similar).</li><li>
Hands-on experience deploying AI agents or LLM-powered applications in production.</li><li>
Familiarity with security tooling such as SIEM, EDR, WAF, or vulnerability scanners (Semgrep, SonarQube, Coana, etc.).</li><li>
Experience with infrastructure-as-code (Terraform), containers, and CI/CD pipelines.</li><li>
Familiarity with compliance frameworks such as ISO 27001, SOC 2, or NIST CSF.</li><li>
Relevant certifications &mdash; cloud (AWS), security (CompTIA Security+, CySA+), or equivalent; though we consider demonstrated experience over credentials.</li><li>
Degree in Computer Science, Information Security, or a related field &mdash; though we value demonstrated experience over credentials.</li></ul><h2 class="jobSectionHeader">
What it's like to work at Gelato</h2>
We are a customer-obsessed team with the ambition to change the world by connecting technology to the printing industry and making it much more sustainable. Everyone who joins our team must feel genuinely intrigued and motivated by our mission. We expect a lot. We are a driven team with big goals, so we seek individuals who are genuinely passionate about their work and possess an entrepreneurial spirit. Our culture is unique and we live by our values, so it's worth learning more about our culture and how we work before presenting your application.
At Gelato, we pride ourselves on our global presence with 14 offices worldwide, fostering a dynamic and diverse work environment. Rooted in a culture that values collaboration, creativity, and camaraderie, we actively cultivate a company culture that thrives on shared experiences. We encourage team members to embrace this culture by working from our inspiring office spaces at least three days a week, allowing for meaningful connections and collective growth.
Lastly, we ask that you please upload your CV in English, regardless of which country you are applying from.</div>

Automation Engineer (Information Security)

Applied Computing

<div>About Applied Computing
Applied Computing was founded in 2024 to build Orbital, a physics-informed foundation model for energy operations. We&rsquo;re live across oil and gas,refineries, and petrochemicals, working towards our mission: sustainableabundance for a growing planet.
The hydrocarbon industry keeps the world running. But its complexity has left operators tied to legacy systems, making critical decisions on less than 10% of available data.
We built Orbital to change that. It&rsquo;s a foundation model built specifically for energy that lets companies use AI at scale, harnessing all of their operational data and optimising in real time for any metric. Decisions get faster, operations get safer, and carbon intensity falls.
We&rsquo;ve raised over $32 million, including one of the largest seed rounds for an AI company in the UK. We&rsquo;re just getting started.
The Role
Security here is not a compliance function with a budget and a slide deck. We take compliance seriously and it is woven into how the team operates. It is an engineering problem that needs solving every day, by someone who gets stuck in.
Our security team is small and honest about it. A hands-on CISO, a Compliance Manager, a Lead Security Researcher who spends his time on the offensive side, and a junior engineer who was the IT lead six months ago and is now doing the best work of their career. We need someone to sit in the middle of that and pull it forward.
The work is real and the ambition is high. We are maturing our DevSecOps capability, driving continuous improvement across our cloud posture, and targeting SOC 2 Type 2 certification within three to six months. Nobody is going to hand you a roadmap. You will help build it.
If that sounds like the kind of problem you want to own, read on.
Key Responsibilities
DevSecOps &amp; Secure SDLC<ul><li>
Design and implement security gates within CI/CD pipelines using GitHub Actions and related tooling</li><li>
Define and enforce secure coding standards and automated checks across development workflows</li><li>
Work closely with engineering teams to embed security early in the development lifecycle without becoming a blocker</li><li>
Champion a shift-left security culture across the organisation</li></ul>
Cloud Security<ul><li>
Own and maintain the cloud security posture across AWS (primary),Azure (development), and M365</li><li>
Use Wiz to continuously monitor, prioritise, and remediate cloud security findings</li><li>
Develop and enforce cloud security standards, IAM policies, and guardrails</li><li>
Identify and close gaps in cloud architecture before they become incidents</li></ul>
Vulnerability Management<ul><li>
Lead the vulnerability management programme, triage, prioritise, track and remediate across the estate</li><li>
Manage the intake of security findings from internal and external sources and ensure nothing falls through the cracks</li></ul><ul><li>
Produce clear, actionable remediation guidance for engineering and infrastructure teams and where needed, roll up your sleeves and raise the PR yourself</li><li>
Track and report on risk reduction over time to the CISO</li></ul>
Mentoring &amp; Team Development<ul><li>
Provide day-to-day mentoring and technical guidance to the junior security engineer</li><li>
Review their work, share your thinking, and help them develop both technically and professionally</li><li>
Contribute to a team culture where curiosity is valued and problems are solved collaboratively</li></ul>
Essential Experience<ul><li>
Hands-on experience with Terraform for infrastructure as code and security configuration management</li><li>
Proficiency with Microsoft Sentinel - building detections, managing alerts, and investigating incidents</li><li>
Working knowledge of Wiz or a comparable cloud security posture management tool</li><li>
Strong understanding of DevSecOps principles and practical experience integrating security into GitHub-based CI/CD pipelines</li><li>
Solid AWS security experience - IAM, security groups, logging,monitoring, and remediation</li><li>
Familiarity with M365 and Azure security configurations</li><li>
Experience delivering against SOC 2 and/or ISO 27001 requirements in a hands-on engineering capacity</li><li>
Proven ability to manage and prioritise a vulnerability backlog under real-world constraint</li></ul>
What We Are Looking For
The technical skills matter. So does everything else. We need someone who does not wait to be told what the problem is. Someone who is curious enough to go looking, confident enough to say what they find, and grounded enough to triage a ticket pile on a Tuesday morning without treating it as beneath them. The role will move between housekeeping and high-stakes projects in the same week.
The junior engineer on the team needs more than a colleague. They need someone who will invest in them, not just review their work but help them think differently. If mentoring energises you, that matters here.
Our Lead Security Researcher already owns the offensive side of AI and ML security. What we need is someone who can hold the defensive line, securing model pipelines, understanding prompt injection risks, thinking about supply chain exposure in AI systems. It is not a requirement for this role.
But if youhave been in that space, you will hit the ground running.
What Success Looks Like
30 Days
You know where the bodies are buried. You have mapped the cloud posture,walked the pipelines, understood the compliance gap, and formed a view on what needs to happen first. You are not still finding your feet, you are alreadycontributing.
60 Days
Your mark is already visible. The DevSecOps capability is stronger, vulnerability management has a process that people follow, and the SOC 2 Type 2 workstream is moving with momentum. The junior engineer is already doing things they were not doing before you arrived.
6&ndash;12 Months
SOC 2 Type 2 is done. Not in progress, done. The cloud posture is measurably stronger, and you can prove it. Security is part of how the engineering team works, not something that happens to them after the fact. You have raised the floor, and you are still raising it.</div>

Security Engineer

Resolution

<div><h1 class="jobSectionHeader">About Resolution</h1>
Resolution does research on how to align artificial superintelligence (ASI). ASI may be developed in the next few years, but it is unclear whether alignment is on track to be ready in the same timeframe. We aim at higher a priori confidence in aligned outcomes by pursuing a portfolio of theory and empirics bets, any one of which &mdash; if it succeeds &mdash; would meaningfully advance the field. We invest heavily in research automation to accelerate progress, and we believe that stronger alignment theory unlocks higher automation: more principled approaches give us better filters for which directions of automated research are promising.
Resolution was founded in 2026 by researchers from UK AISI's Alignment Team, who ran the &pound;30m Alignment Project, and Timaeus, who pioneered applying singular learning theory to alignment.
For more information, see our announcement.<h1 class="jobSectionHeader">
About the Team</h1>
Resolution's work will involve sensitive frontier-relevant research and partnerships with AI labs. This role exists both to protect that work and to enable it: good security is what makes deeper lab partnerships possible. We draw a distinction between two closely related areas of security:<ul><li>
Research &amp; infrastructure security. Securing how research actually runs: CI/CD pipelines, automated research agents, multi-cloud compute, and code/data/model-weight handling.</li><li>
Corporate IT &amp; security. The endpoint, identity, and collaboration scaffolding a distributed research org runs on, in combination with the compliance frameworks that unlock lab partnerships.</li></ul>
This role focuses on the former, covering security on the technical side of the organization. You would report to senior leadership and work closely with our security and engineering teams (as well as with our operations team).
In practice, we expect to grow the security team one hire at a time, so your initial set of responsibilities is likely to span both areas. We expect the distinction to clarify over time.<h2 class="jobSectionHeader">
About the Role</h2>
You are the security architect for our research pipeline. You'll define how we securely conduct research across multiple cloud environments, partnering closely with engineering to make CI/CD, automated research agents, and large-scale compute secure by default. You would build a hardened environment where researchers and agents iterate at speed without risking data leakage, supply-chain compromise, and other security failures.<h2 class="jobSectionHeader">
Responsibilities</h2>
1. Secure DevSecOps &amp; CI/CD Orchestration<ul><li>
Pipeline Hardening: Build security guardrails directly into our CI/CD pipelines. Ensure that every deployment, whether manual or agent-driven, is automatically scanned, verified, and compliant.</li><li>
Automated Verification: Establish workflows where our agents can test their own code and infrastructure changes against security policies before deploying to production environments.</li><li>
Infrastructure as Code (IaC): Lead the implementation of &quot;Compliance as Code.&quot; Automate the auditing and enforcement of security configurations across our AWS, GCP &amp; neocloud footprints.</li></ul>
2. Supply Chain Security for Automated Research<ul><li>
Provenance and Integrity: In an environment where we rely heavily on automated coding agents, build systems to ensure the provenance of code and dependencies. Implement robust signing, SBOM (Software Bill of Materials) generation, and automated vulnerability management.</li><li>
Agent Sandbox Security: Define and enforce security models for our research agents. Ensure that agents have the &quot;least privilege&quot; access required to execute experiments while remaining isolated from sensitive IP and credentials.</li></ul>
3. Multi-Cloud Research Infrastructure<ul><li>
Compute Security: Manage the security architecture for our high-compute research environments. We operate in a multi-cloud ecosystem; you will be responsible for consistent, zero-trust network segmentation and identity management across disparate cloud providers.</li><li>
Research Data Protection: Develop and maintain the data handling protocols necessary for working with pre-publication research and potentially sensitive model weights.</li></ul>
4. Enabling Frontier Access<ul><li>
Compliance as a Competitive Advantage: Partner with AI labs to navigate security audits. You will bridge the gap between our &quot;move fast&quot; research culture and the high-bar security requirements of frontier model providers, turning compliance into an accelerator for our research agenda.</li></ul><h2 class="jobSectionHeader">
You May Be a Good Fit If You</h2><ul><li>
Are a seasoned security engineer who writes code, with deep experience in Terraform, Kubernetes, and CI/CD tools (GitHub Actions, GitLab CI).</li><li>
Have managed security across multiple cloud providers (AWS / GCP / neoclouds) and understand the nuance of securing ephemeral, high-compute research clusters.</li><li>
Take a pragmatic approach to modern software supply chains and understand the unique risks of AI-driven development and how to mitigate them without killing velocity.</li><li>
Understand the threat model of a high-value target for state-level actors and IP theft, and can build systems robust against sophisticated adversaries.</li><li>
Can explain complex security trade-offs to lead researchers and scientists, saying &quot;yes, safely&quot; rather than just &quot;no.&quot;</li><li>
Are willing to use AI tools aggressively in your own workflow, with appropriate care to not get fooled!</li><li>
Are motivated by alignment of artificial superintelligence (ASI) and want to contribute to it full-time.</li></ul><h2 class="jobSectionHeader">
Why This Role is Unique</h2>
At this organization, &quot;Corporate Security&quot; is a separate function. This role is focused on the Research Infrastructure. You will be working at the frontier of how automated alignment research is actually done. You will be building the security primitives for a new way of doing science: one where humans and machines collaborate to solve the most important problem of the 21st century.<h1 class="jobSectionHeader">
Logistics</h1>
Salary: Your salary depends on the scope, autonomy, and impact we expect you to have while working at Resolution. The expected range of in-person salaries for this role is:<ul><li>
L4 (SWE II): $346,000
</li><li>L5 (Senior SWE): $451,000
</li><li>L6 (Staff SWE): $670,000
</li><li>L7 (Senior Staff SWE): $930,000
</li></ul>We level using an internal adaptation of Google's standard levelling; the band above is indicative of where a strong candidate might come in.
Location: Berkeley, California. Remote may be considered in exceptional cases.
Benefits:<ul><li>
5 weeks of paid vacation per year, in addition to public holidays.</li><li>
Comprehensive healthcare insurance (medical, dental, vision).</li><li>
Unlimited sick leave to prioritize your well-being.</li><li>
An unconditional 401(k) contribution equal to 4% of your salary.</li></ul>
Visa sponsorship: We can sponsor visas for relocation to Berkeley.
Minimum education: A bachelor's degree in a field relevant to the role, or an equivalent combination of education, training, and/or professional experience that demonstrates comparable knowledge.
Deadline: Applications are rolling &mdash; please apply ASAP. We'll respond to applications within one week of receipt.
Start date: ASAP.
Compensation Range: $346K - $930K</div>

Security Engineer (Research Infrastructure)

Blockchain

<div><div>Blockchain is connecting the world to the future of finance. As the most trusted and fastest-growing global crypto company, it helps millions of people worldwide safely access cryptocurrency. Since its inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.</div>
You will operate the Product Security programe for Blockchain.com's internally-developed products across Consumer, OTC and MRE lines. This is a senior, hands-on role: you'll design and run the secure development lifecycle, lead threat modeling and architecture review, own the security debt lifecycle for product engineering teams, and architect the automated pipelines that protect billions in transaction volume. You will embed with product and engineering teams, convert technical findings into business-prioritized remediation, and lift developer capabilities so security is delivered by code and process.

WHAT YOU WILL DO
<ul>
<li>Strategic Security Partnership: Act as a senior security engineer for the different product lines like Consumer, OTC. You will own the security gates for major feature releases and ensure security is integrated from the design phase.</li>
<li>Secure SDLC Operator: Operate and improve the secure development lifecycle. This includes orchestrating SAST/SCA/DAST, streamlining SARIF ingestion, PR review standards, CI/CD security automation, and vulnerability triage workflows.</li>
<li>AI-Driven SDLC Innovation: Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into our secure development lifecycle.</li>
<li>Threat Modelling &amp; Architecture Reviews: Lead STRIDE/attack-tree threat models for sensitive flows including authentication, payment, custody, reconciliation and sign off on security architecture for critical designs.</li>
<li>Product Security Governance &amp; Standards: Translate technical risks and regulatory demands into clear security policies. You will own the creation and upkeep of our Application Security Standards, reference architectures, and compliance-driven secure coding baselines.</li>
<li>Bug Bounty Leadership: Oversee the technical triage and remediation strategy for our Bug Bounty program. You will turn external researcher findings into internal architectural hardening projects.</li>
<li>Release Reviews: Perform deep-dive manual code reviews of security-sensitive Pull Requests, mentor engineers on secure coding patterns, and provide pragmatic remediation guidance.</li>
<li>Advanced Code Auditing: Conduct deep-dive manual and automated code reviews on highly sensitive Java and Kotlin backend Pull Requests.</li>
<li>Security Debt &amp; Remediation Negotiation: Produce data-driven Security Debt packs and negotiate remediation into engineering roadmaps. You will negotiate remediation timelines with Product Owners and Engineering leadership, backed by risk-based data.</li>
<li>Detection &amp; Telemetry Integration: Define application runtime signals (business-logic anomalies, auth anomalies, reconciliation mismatches) and work with SecOps to instrument logs and alerts.</li>
<li>Testing &amp; Automation: Build and maintain product-level test harnesses, fuzzing/property tests and CI checks to prevent regressions for business-critical flows.</li>
<li>Incident Response Support: Provide product-level Incident Response expertise like test forensic runbooks, support reproduction of payment/settlement incidents, and advise on containment/remediation whenever needed.</li>
<li>Metrics &amp; Risk Visibility: Define and own the Product Security metrics (e.g., MTTR for critical vulnerabilities, security debt burn-down, and defect density). You will translate these KPIs into high-level risk reports for the Head of Security and Engineering leadership to drive data-backed resourcing decisions.</li>
<li>People &amp; Process: Coach junior product security engineers and security champions. You will assist the Product Security Lead to define hiring standards and capability plans.</li>
</ul>
WHAT YOU WILL NEED

Must-Haves
<ul>
<li>4+ years total security engineering experience with at least 3+ years focused specially in application/product security or equivalent.</li>
<li>Experience with Web, Mobile, Cloud, Infrastructure Pentests and Red Teaming (e.g., phishing)</li>
<li>Proven track record of shipping security automation using CodeQL/GHAS, Snyk, or similar. You should be intimately familiar with the SARIF ecosystem and ASPM workflows.</li>
<li>Expert-level ability to audit and propose fixes in Kotlin/Java, TypeScript/JS, Python, and familiarity with containerised deployments (Kubernetes).</li>
<li>Strong threat modeling experience and pragmatic architecture guidance for high-stakes financial flows (AuthN/AuthZ, Cryptography, Payments).</li>
<li>Experience building CI checks, test harnesses and lightweight fuzzing/property tests.</li>
<li>Excellent stakeholder skills &mdash; able to negotiate remediation with Engineering Directors and Product owners, balancing security requirements with business velocity.</li>
</ul>
Nice-to-haves
<ul>
<li>Prior fintech/Trading/OTC product security experience or familiarity with custody/signing patterns.</li>
<li>Practical experience designing or deploying AI-assisted security tooling, leveraging LLMs for automated software patch generation, or evaluating vulnerability detection agents within enterprise developer pipelines.</li>
<li>Prior experience operating alongside GRC frameworks, authoring developer-facing security policies from scratch, and building automated policy-as-code gateway integrations.</li>
<li>Public track record of CVEs, security research, or open-source contributions to security tooling.</li>
<li>Advanced credentials such as OSCP, OSWE, CISSP or equivalent.</li>
<li>Experience with on-chain/off-chain integration, payment reconciliation, or smart contract security.</li>
<li>Familiarity with vulnerability management platforms (DefectDojo, Dependabot orchestration) and GRC/Gateway integrations.</li>
<li>Prior contributions to security automation and developer tooling (open source or internal).</li>
</ul>
COMPENSATION &amp; PERKS
<ul>
<li>Full-time salary based on experience and meaningful equity in an industry-leading company</li>
<li>This is a role based in our London office, with a mandatory in-office presence four days per week.</li>
<li>Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.</li>
<li>ClassPass</li>
<li>Unlimited vacation policy; work hard and take time when you need it</li>
<li>Apple equipment</li>
<li>The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field</li>
<li>Flexible work culture</li>
</ul><div>
Blockchain is committed to diversity and inclusion in the workplace and is proud to be an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, religion, color, national origin, gender, gender expression, sex, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, and apprenticeship. Blockchain makes hiring decisions based solely on qualifications, merit, and business needs at the time.

You may contact our Data Protection Officer by email at dpo@blockchain.com. Your personal data will be processed for the purposes of managing Controller's recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.

Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller's behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under the standard contractual clauses.

Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have the right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.</div></div>

Senior Product Security Engineer

<div><h1 class="jobSectionHeader">About Resolution</h1>
Resolution does research on how to align artificial superintelligence (ASI). ASI may be developed in the next few years, but it is unclear whether alignment is on track to be ready in the same timeframe. We aim at higher a priori confidence in aligned outcomes by pursuing a portfolio of theory and empirics bets, any one of which &mdash; if it succeeds &mdash; would meaningfully advance the field. We invest heavily in research automation to accelerate progress, and we believe that stronger alignment theory unlocks higher automation: more principled approaches give us better filters for which directions of automated research are promising.
Resolution was founded in 2026 by researchers from UK AISI's Alignment Team, who ran the &pound;30m Alignment Project, and Timaeus, who pioneered applying singular learning theory to alignment.
For more information, see our announcement.<h1 class="jobSectionHeader">
About the Team</h1>
Resolution's work will involve sensitive frontier-relevant research and partnerships with AI labs. This role exists both to protect that work and to enable it: good security is what makes deeper lab partnerships possible. We draw a distinction between two closely related areas of security:<ul><li>
Research &amp; infrastructure security. Securing how research actually runs: CI/CD pipelines, automated research agents, multi-cloud compute, and code/data/model-weight handling.</li><li>
Corporate IT &amp; security. The endpoint, identity, and collaboration scaffolding a distributed research org runs on, in combination with the compliance frameworks that unlock lab partnerships.</li></ul>
This role focuses on the latter, covering security on the operational side of the organization. You would report to senior leadership and work closely with our security and operations teams (as well as with our engineering team).
In practice, we expect to grow the security team one hire at a time, so your initial set of responsibilities is likely to span both areas. We expect the distinction to clarify over time.<h2 class="jobSectionHeader">
About the Role</h2>
We are looking for a hands-on, strategic leader to build and own our Corporate IT and Security function from the ground up. As we scale from our current team to 40&ndash;60 FTEs over the next two years, you will be the single point of accountability for ensuring our researchers have the tools they need to move fast while maintaining a security posture that earns the trust of external partners and AI labs.
We are looking for a builder, not just a manager. You should be comfortable getting into the weeds of configuration and implementation, but you understand that your ultimate goal is to enable world-class research through secure infrastructure.<h2 class="jobSectionHeader">
Responsibilities</h2>
1. Secure Research Infrastructure (Endpoint &amp; Device Management)<ul><li>
Design and deploy a secure-by-default environment for a diverse workforce, spanning in-person teams in Berkeley and remote researchers globally.</li><li>
Manage endpoint security (MDM/EDR) for a hybrid fleet, ensuring that researchers can interact with high-value research code and data safely without sacrificing velocity.</li></ul>
2. Identity and Access Management (IAM)<ul><li>
Implement a robust Zero-Trust architecture. You will define the lifecycle of identities for our staff, collaborators, and automated research agents.</li><li>
Ensure rigorous access control management, balancing the open-science nature of our publication goals with the extreme sensitivity of our pre-publication research and model access requirements.</li></ul>
3. Communications and Email Security<ul><li>
Secure our communication channels. As an organization that may become a high-value target for state actors and competitive intelligence gathering, you will implement advanced email security, phishing protection, and secure collaborative workflows.</li></ul>
4. Security Architecture as an Enabler<ul><li>
Act as the primary bridge between our research needs and the security requirements of external AI labs.</li><li>
Help us navigate the security audits required to gain and maintain access to frontier models, turning compliance into an accelerator for our research agenda.</li></ul><h2 class="jobSectionHeader">
You May Be a Good Fit If You</h2><ul><li>
Are a hands-on operator with a technical background and are comfortable configuring systems, scripting automation, and personally setting up the stack.</li><li>
Understand the threat model of a high-stakes research organization and can balance extreme security with an AI lab's &quot;move fast&quot; requirements.</li><li>
Have built an IT and/or security function from scratch and can operate with autonomy and ambiguity in an early-stage org.</li><li>
Can translate technical security requirements into plain English for researchers, theorists, and leadership.</li><li>
Are familiar with compliance frameworks (SOC 2, ISO 27001) and partner-lab security requirements.</li><li>
Are willing to use AI tools aggressively in your own workflow, with appropriate care to not get fooled!</li><li>
Are motivated by alignment of artificial superintelligence (ASI) and want to contribute to it full-time.</li></ul><h2 class="jobSectionHeader">
Why This Role is Unique</h2>
At most organizations, IT and Security are viewed as overhead. Here, your work is a core component of the research strategy. By securing our operations, you enable the collaboration and external partnerships that allow our researchers to access sensitive models and data to accelerate progress. You will help define the operational security standards for a new generation of AI safety organizations.<h1 class="jobSectionHeader">
Logistics</h1>
Salary: Your salary depends on the scope, autonomy, and impact we expect you to have while working at Resolution. The expected range of in-person salaries for this role is:<ul><li>
L4 (SWE II): $346,000
</li><li>L5 (Senior SWE): $451,000
</li><li>L6 (Staff SWE): $670,000
</li><li>L7 (Senior Staff SWE): $930,000
</li></ul>We level using an internal adaptation of Google's standard levelling; the band above is indicative of where a strong candidate might come in.
Location: Berkeley, California. Remote may be considered in exceptional cases.
Benefits:<ul><li>
5 weeks of paid vacation per year, in addition to public holidays.</li><li>
Comprehensive healthcare insurance (medical, dental, vision).</li><li>
Unlimited sick leave to prioritize your well-being.</li><li>
An unconditional 401(k) contribution equal to 4% of your salary.</li></ul>
Visa sponsorship: We can't guarantee visa sponsorship, though this will be possible in some circumstances.
Minimum education: A bachelor's degree in a field relevant to the role, or an equivalent combination of education, training, and/or professional experience that demonstrates comparable knowledge.
Deadline: Applications are rolling &mdash; please apply ASAP. We'll respond to applications within one week of receipt.
Start date: ASAP.
Compensation Range: $346K - $930K</div>

Security Engineer (Corporate IT)

Deliveroo

<div>About the team
At Doordash, Deliveroo and Wolt, we&rsquo;re building the industry&rsquo;s most scalable and reliable delivery network to support our multi-sided marketplace of consumers, merchants, Dashers, and partners. Security, privacy, and compliance are foundational to earning and maintaining trust as we expand globally.
The Governance, Risk, and Compliance team partners across Security, Engineering, Legal, Privacy, Product, IT, Procurement, Internal Audit, and business teams to help DoorDash understand its compliance obligations, manage security and privacy risk, and build durable programs that scale with the company.
About the role
We&rsquo;re looking for a Senior Information Security Specialist to help mature DoorDash&rsquo;s global security and privacy compliance risk program. You will create and operationalise a global compliance change process framework that helps DoorDash detect changes in our compliance landscape, assess impact, identify gaps, and drive accountable remediation across teams.
This is a senior individual contributor role for someone who has managed global compliance frameworks and security/privacy compliance programs in a technology company. You will bring structure to ambiguous compliance changes, translate requirements into actionable control expectations, facilitate risk workshops, and help leadership understand compliance risk in clear business terms.
What you'll be doing<ul><li>
Design and operate a global compliance change management framework to identify new or changing security, privacy, regulatory, contractual and framework obligations across DoorDash&rsquo;s markets and products.</li><li>
Maintain a structured view of DoorDash&rsquo;s compliance landscape, including obligation inventories, control mappings, ownership models, risk decisions and remediation status.</li><li>
Lead compliance-impact assessments for new regulations, framework updates, product launches, market expansions, vendor changes and major technology initiatives.</li><li>
Facilitate compliance risk workshops with Engineering, Legal, Privacy, Product, Procurement, IT, Internal Audit and business stakeholders.</li><li>
Translate complex regulatory, security, and privacy requirements into practical control expectations and specifications that technical and non-technical teams can implement.</li><li>
Identify control gaps, assess residual risk, define remediation plans and track progress through closure with clear accountability.</li><li>
Partner with control owners to improve evidence quality, audit readiness, and sustainable operation of controls across global compliance frameworks.</li><li>
Help mature DoorDash&rsquo;s risk register, compliance reporting, dashboards, metrics and executive-level risk communications.</li><li>
Support control mapping and harmonization across frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS, GDPR, UK GDPR, NIS2, DORA, and emerging AI governance requirements.</li><li>
Promote a risk-based, pragmatic compliance culture that enables DoorDash teams to move quickly while protecting customers, partners, employees and the business.</li></ul>
Requirements<ul><li>
You have 6+ years of experience in GRC, security compliance, technology risk, privacy compliance, IT audit, or a related field, preferably in a global technology, marketplace, SaaS, fintech or payments environment.</li><li>
You have managed or materially contributed to a global compliance framework or security/privacy compliance management program.</li><li>
You have built, operated or significantly improved a compliance change management, obligations management, control mapping or regulatory-change process.</li><li>
You have hands-on experience facilitating risk assessments, compliance risk workshops, control self-assessments and remediation planning with cross-functional stakeholders.</li><li>
You have strong working knowledge of security and privacy frameworks such as ISO 27001, SOC 2, GDPR or CCPA, and you can quickly assess applicability of new frameworks or regulatory requirements.</li><li>
You understand how security and privacy controls operate in modern technology environments, including cloud infrastructure, identity and access management, SDLC, incident response, vendor risk, data governance and business continuity.</li><li>
You can translate legal, regulatory and framework requirements into clear, tangible control specifications to engineers and explain technical risk in business terms.</li><li>
You communicate clearly, write with precision and can create high-quality policies, procedures, risk memos, control narratives, executive updates, and decision records.</li><li>
You are comfortable navigating ambiguity, balancing multiple priorities and driving outcomes without relying on constant direction.</li><li>
You build trust with technical and non-technical stakeholders and can facilitate conversations rather than dictate outcomes.</li></ul>
Why Doordash, Deliveroo and Wolt
Our mission is to transform the way you shop and eat, bringing the neighbourhood to your door by connecting consumers, restaurants, shops and riders. We are transforming the way the world eats and shops by making access to food and products more convenient and enjoyable. We give people the opportunity to buy what they want, as they want it, when and where they want it.
We are a technology-driven company at the forefront of the most rapidly expanding industry in the world. We are still a small team, making a very large impact, looking to answer some of the most interesting questions out there. We move fast, value autonomy and ownership, and we are always looking for new ideas.
Workplace &amp; Benefits
At Doordash we know that people are the heart of the business and we prioritise their welfare. Benefits differ by country, but we offer many benefits in areas including healthcare, well-being, parental leave, pensions, and generous annual leave allowances, including time off to support a charitable cause of your choice. Benefits are country-specific, please ask your recruiter for more information.
Diversity
At Doordash, we believe a great workplace is one that represents the world we live in and how beautifully diverse it can be. That means we have no judgement when it comes to any one of the things that make you who you are - your gender, race, sexuality, religion or a secret aversion to coriander. All you need is a passion for (most) food and a desire to be part of one of the fastest-growing businesses in a rapidly growing industry.
We are committed to diversity, equity and inclusion in all aspects of our hiring process. We recognise that some candidates may require adjustments to apply for a position or fairly participate in the interview process. If you require any adjustments, please don't hesitate to let us know. We will make every effort to provide the necessary adjustments to ensure you have an equitable opportunity to succeed.</div>

Senior Information Security Specialist

Explore 773+ Information security engineer in London this July. Find roles across top companies and apply now to boost your career.