product security engineer

Cognism

<div><div><h2 class="jobSectionHeader">WHO ARE WE</h2>

Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</div>
THE ROLE

The Senior Application Security Engineer is a key member of Cognism's Information Security Team, reporting into the Application &amp; Infrastructure Security Manager. Your mission is to embed security by design across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path.

You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception &ndash; all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day.

This role is ideal for a senior IC who is technical, collaborative, and pragmatic, with the ability to influence engineering teams while driving hands on improvements to Cognism's secure SDLC.

KEY RESPONSIBILITIES

Security by Design &amp; Product Integration
<ul>
<li>Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.</li>
<li>Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.</li>
<li>Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning.</li>
</ul>
Application Risk Assessment &amp; AI Security
<ul>
<li>Identify and assess application risks across Cognism's SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.</li>
<li>Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.</li>
<li>Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets.</li>
</ul>
Secure SDLC &amp; DevSecOps Enablement
<ul>
<li>Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.</li>
<li>Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).</li>
<li>Drive automation and developer-friendly security processes that minimize friction and support rapid delivery.</li>
</ul>
Threat Modelling &amp; Architecture Support
<ul>
<li>Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.</li>
<li>Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.</li>
<li>Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.</li>
<li>Maintain and expand Cognism's secure coding standards, guidance, and reusable security patterns.</li>
</ul>
Application Security Testing &amp; Engineering
<ul>
<li>Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.</li>
<li>Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.</li>
<li>Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies.</li>
</ul>
Collaboration, Education &amp; Influence
<ul>
<li>Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape.</li>
<li>Deliver security training, workshops, and guidance to improve engineering teams' security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders.</li>
</ul>
CORE COMPETENCIES
<ul>
<li>Strong technical depth in application security, cloud security, and secure development.</li>
<li>Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.</li>
<li>Deep understanding of communication protocols used for web development is a must-have.</li>
<li>Hands on experience with web application development, specifically for back-end development is a must-have competency.</li>
<li>Risk-Based Prioritization: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a &quot;risk-driven&quot; rather than &quot;compliance-driven&quot; mindset. Comfortable balancing security risk with product and commercial realities.</li>
<li>Contextual Communication: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners.</li>
<li>Collaborative Conflict Resolution: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience. Pragmatic problem solver with a growth mindset and bias toward action.</li>
<li>Architectural Empathy: Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles.</li>
</ul>
EDUCATION &amp; EXPERIENCE
<ul>
<li>5&ndash;10+ years of experience in Application Security, Product Security, or Security Engineering roles.</li>
<li>Strong experience securing cloud native SaaS platforms (AWS preferred) and Data pipelines.</li>
<li>Handson experience with secure coding, application testing, and CI/CD security automation.</li>
<li>Experience working closely with engineering and product teams in agile environments.</li>
<li>Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.</li>
<li>Experience evaluating and securing AI/ML enabled features is a strong advantage.</li>
<li>Experience in SME or high-growth SaaS environments preferred.</li>
</ul><div>
<h2 class="jobSectionHeader">WHY COGNISM</h2>

At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who support, challenge, and inspire each other every day. If you're looking for a place where your work truly makes an impact, you're in the right spot!

Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.

Here's what we stand for:

 We Own the Outcome Together. 
 We Deeply Understand our Customers. 
 We Celebrate Impact Wherever It Comes From.

At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</div></div>

Senior Application Security Engineer

Voxquill

<div>I'm looking for our founding engineer!
 
The person who takes a live, paying fintech product and makes it truly ours.
We build receipt-and-proof automation for the self-employed: the app quietly finds your receipts (email, bank feeds, camera roll, texts), sorts them, matches them to your bank transactions, and produces accountant-ready exports. It's live on iOS and Android, it's SOC 2 certified, and people are paying for it. The model works.
I need one person who treats this codebase as theirs, ships fast, and owns the platform end-to-end. This is a founding engineer role with a real path to CTO.
Your first job is to take the keys.
 
Move the platform off the agency's Azure into ours, take custody of production, and the headline deliverable.
 
Build the automated test suite this codebase never had, with a CI/CD pipeline where a green build genuinely means &quot;safe to ship.&quot; Then you own the roadmap.
How we build matters as much as what we build.
 
We are not rebuilding an IT shop of tickets and manual QA.
 
Terrapin runs as an AI-native pod: Claude Code and agents do the repetitive work and produce tested, PR-ready changes; you own architecture, review, security, and the hard 20%.
 
AI gives you the velocity, your tests and pipeline are what keep that velocity from turning into breakage!
We want to ship multiple times a week and almost never break anything, and hold our SOC 2 line the whole way. If that model excites you rather than worries you, you're the person.
This is genuinely full-stack.
 
Strong .NET / C# backend on Azure, real ownership of infra, security, and DevOps, and polished mobile (React Native + Expo, iOS and Android); Because the app is the product. Testing isn't someone else's job here. It's the core discipline.
The kind of person whose teammates would describe as:<ul><li>
an owner, not a ticket-taker</li><li>
obsessive about shipping quality fast</li><li>
calm owning production for a product with real money moving through it</li><li>
someone who builds automation instead of doing the same thing twice</li><li>
security-minded by instinct, not as an afterthought</li></ul>
What you'd bring:<ul><li>
Senior+ .NET / C# backend, PostgreSQL, solid API design</li><li>
Real Azure ownership: App Services, networking, Key Vault, identity, CI/CD (Azure DevOps or similar)</li><li>
Strong React Native + Expo mobile, with genuine UI/UX taste</li><li>
Test automation and CI/CD as a way of life &mdash; you write the tests with the code</li><li>
Hands-on building with Claude Code / agent tooling, and doing it safely in a SOC 2 world</li></ul>
Bonus points: fintech / payments background, Plaid experience, or applied LLM work.
And the reason the right engineer will actually stay: receipts are just the wedge. We're building toward a verifiable, tamper-evident record of an economic event. Proof that banks, insurers, and AI agents can consume directly. Stripe is a payment rails. We're building proof rails.
You'd work directly with me every day &mdash; 18+ years in fintech and payments, two exits behind me &mdash; so you own the engineering but never carry the hard architecture, security, or product calls alone.
The details:
 
UK or EU-remote(temporarily), with solid overlap to UK hours and business trips.
We're genuinely open to strong candidates across both. Being open to relocating to the UK down the line is a plus, but not a day-one requirement.
 
Competitive base plus real founding-level equity.
One hard line: you build quality in through tests and CI/CD. We're deliberately leaving the manual-testing, hope-it-works world behind, and a dev who treats testing as optional isn't the hire. Everything else, we can talk about.
If you want founder-level ownership, a CTO trajectory, and an AI-native way of building, and owning a live fintech platform from week one lights you up, let's talk.
Apply and tell me about something you shipped that you're proud of, and one thing you broke and how you made sure it never happened again.</div>

Founding Engineer (Full Stack); Patch to CTO

HOMETRACK

<div>Hybrid working pattern - 2 days per week from London Bridge Office
Hometrack is seeking an experienced Senior Data Engineer to join our product team to help us deliver Hometrack's Data Services ambitions. By building the best property data sets available, which back the market leading AVM, trusted by 17 out of the top 20 mortgage lenders in the UK, we open the door to helping all our customers make the decisions that matter to them - to buy, to lend, to build.
The Data Services team works with 100s of customers across the property sector ranging from mortgage lenders, house builders, investors, fin &amp; proptech, insurers, telco, retail and utilities, as well as others involved in the housing market. Our mission is to inform decision makers by putting the UK&rsquo;s most trusted property data and insights at the heart of the property ecosystem.
Our market intelligence and customer acquisition, retention and engagement solutions are relied upon by leading industry professionals.
Data Services has a diverse product range covering market, property and mover intelligence, delivered through varying mechanisms including data platforms, reports and APIs, providing maximum flexibility when matching our customers&rsquo; needs to the most effective data solution.
Hometrack is looking for an experienced senior data engineer to help us make this a reality.
What we&rsquo;re looking for in a Senior Data Engineer:<ul><li>
Be accountable for team outcomes, playing your part in achieving team goals and ensuring your contribution positively impacts overall success</li><li>
Be a continual improver, looking for ways to help the team do better and be better, again and again</li><li>
Write maintainable, testable code and enjoy providing code reviews</li><li>
Be experienced with Databricks, Delta Lake and Lakehouse architecture for efficient data management; experience with ETL processes and optimizing data pipelines for performance</li><li>
Be strong in Python, SQL, and PySpark</li><li>
Be passionate about building data products for stakeholders and customers, ensuring they are stable, scalable, secure, accurate, observable, and performant</li><li>
Enjoy collaborating closely with colleagues in Product, Analytics, Security, and Software, explaining technical concepts to non-technical audiences</li></ul></div>

Senior Data Engineer

Humanoid

<div>Here at Humanoid, we believe in a future where robots amplify human potential. That&rsquo;s why we&rsquo;ve set out on a mission to build the world&rsquo;s most capable, commercially-scalable, and safe humanoid robots. We&rsquo;re bringing that mission to life with HMND‑01 Alpha - our rapidly developed humanoid platform now running in real industrial pilots - and we&rsquo;re growing the team to take it even further.<h1 class="jobSectionHeader">
About the Role</h1>
We are seeking a Principal Product Cybersecurity Assurance Engineer with deep expertise in product security, threat modelling, and risk assurance for highly regulated electromechanical systems. In this role, you will lead the delivery of product cybersecurity across Humanoid's HMND 01 platform family &mdash; the Alpha Wheeled industrial robot and the Alpha Bipedal home robot &mdash; both powered by our KinetIQ VLM/VLA-based AI framework. Working alongside product, firmware, autonomy, and hardware teams as part of the Systems Engineering and Architecture Team, you will define and maintain the cybersecurity assurance strategy for all product security activities from first concept through post-market deployment. Security at Humanoid is an engineering discipline inseparable from functional safety and central to our mission of creating the world's most reliable, commercially scalable, and safe humanoid robots. To excel in this position, you must demonstrate the authority to influence security architecture decisions across complex, cross-functional programmes, the rigour to build defensible security cases for novel cyber-physical systems, and the leadership to grow and guide a cross team of security engineers operating at the frontier of robotics.<h1 class="jobSectionHeader">
What You'll Do</h1><ul><li>
Team Leadership &amp; Product Security Delivery<ul><li>
Lead and develop a cross-functional team of security engineers, maintaining accountability for the delivery of product security services within product teams throughout the HMND 01 development lifecycle.</li><li>
Define product security requirements and advise development teams on suitable implementation standards, techniques, and toolchains for embedded and AI-enabled robotic systems.</li><li>
Partner with cross-functional teams to develop security protocols, tools, and processes that keep HMND 01 technologies ahead of emerging threats &mdash; including attack surfaces specific to the KinetIQ AI inference pipeline and cloud-to-robot communication architecture.</li><li>
Own and maintain key security artefacts for audit-ready cybersecurity documentation including Security Management Plans, Threat Analysis and Risk Assessment (TARA) reports, Risk Assessments, and Remediation Action Plans across both platforms.</li></ul>
Security Assurance &amp; Certification<ul><li>
Drive security assurance through the full product lifecycle, ensuring every HMND 01 design is robust, compliant, and resilient. Contribute to the continual improvement of security engineering capability across the organisation.</li><li>
Ensure compliance with cybersecurity obligations under the EU Machinery Regulation 2023/1230 where cyber controls intersect with safety-critical functions and compliance to IEC 62443 (for industrial/OT product security), and the EU Cyber Resilience Act.</li><li>
Provide independent Information Assurance (IA) reviews and risk assessments on complex, high-impact projects &mdash; with particular focus on cyber-physical systems where a digital compromise could result in physical harm to operators or end users.</li><li>
Review and provide guidance on security risk assessments, risk mitigation plans, mitigation gap analysis, and security management documentation in support of system cybersecurity certification.</li></ul>
Incident Response &amp; Lifecycle Security<ul><li>
Establish and maintain a Product Security Incident Response (PSIR) process, encompassing coordinated vulnerability disclosure, patch deployment pipelines, and post-field incident analysis.</li><li>
Define and oversee security monitoring requirements for deployed fleets, ensuring field data feeds back into risk files and security artefacts in line with post-market surveillance obligations.</li></ul>
Commercial &amp; Bid Support<ul><li>
Support the production of work package descriptions and cost estimates for product bids, services, and proposals that include product security scope.</li><li>
Represent Humanoid's security posture in customer and partner engagements, including regulatory consultations and certification body interactions.</li></ul></li></ul><h1 class="jobSectionHeader">
What We're Looking For</h1><ul><li>
Proven, hands-on experience with ISO 27001/27004/27005 and the NIST Risk Management Framework (RMF), applied to regulated hardware or embedded product programmes.</li><li>
Experience owning a security risk management system for highly regulated, safety-critical products &mdash; with background drawn from automotive, commercial vehicle, or industrial automation environments.</li><li>
Working knowledge of IEC 62443, with the ability to adapt ISO/SAE 21434 lifecycle methodologies to robotic or electromechanical product context.</li><li>
Solid understanding of engineering development lifecycles and how the product cybersecurity specialism aligns with systems engineering, functional safety, and hardware/software co-development.</li><li>
Ability to interpret Penetration Test reports and author Remediation Action Plans that address identified vulnerabilities in a structured, risk-prioritised manner.</li><li>
Clear, structured communication skills &mdash; able to articulate complex security risk arguments to both technical engineers and executive stakeholders with equal confidence.</li></ul>
Preferred:<ul><li>
Familiarity with Threat Analysis and Risk Assessment (TARA) or equivalent threat modelling methodologies (STRIDE, PASTA) applied to embedded or OT/IT convergent systems.</li><li>
Understanding of secure-by-design principles for AI/ML-enabled systems, including securing inference pipelines, model integrity, and cloud-to-edge communication paths.</li><li>
Exposure to CAN bus, Ethernet backbone, or wireless interface security in mobile, vehicular, or robotic systems.</li><li>
Experience contributing to or establishing a Product Security Incident Response (PSIRT) process or coordinated vulnerability disclosure programme.</li><li>
Knowledge of UL 4600, UL 3300, or ISO 13482 and an appreciation of how cybersecurity evidence integrates into safety case arguments.</li><li>
Prior engagement with certification bodies (TUV, UL, BSI) or standards development organisations (ISO TC 184, IEC TC 65, SAE, IEEE RAS).</li></ul><h1 class="jobSectionHeader">
What We Offer</h1><ul><li>
Competitive equity: stock options with meaningful upside as we scale.</li><li>
30+ days off, including 23 days annual leave, all UK bank holidays, and additional company closure days (including Christmas&ndash;New Year shutdown).</li><li>
Private healthcare, including virtual and in-person care.</li><li>
Pension scheme with 8% total contribution (5% employee, 3% employer) on full earnings.</li><li>
Free daily breakfast, catered lunch, and snacks in-office.</li><li>
Work at the frontier - collaborate daily with world-class engineers, researchers, and product experts building the next generation of AI and humanoid robotics.</li><li>
Real ownership - direct access to founding leadership, meaningful input on product direction, and the ability to drive key initiatives from day one.</li></ul></div>

Principal Product Cybersecurity Assurance

JPMorganChase

<div>JOB DESCRIPTION 
 
 
Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that prioritize security from the start.
Job Summary:
As a Senior DevSecOps Architect in the Cybersecurity &amp; Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy, and serving as the subject matter expert for the DevSecOps strategy as well as embedding automated security controls into CI/CD pipelines. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.
Job Responsibilities:
<ul><li>Pipeline Security Architecture - Design, implement, and continuously improve security architecture for CI/CD pipelines and DevOps toolchains, ensuring automated security checks are embedded at every stage from code commit to production deployment.</li>
<li>Security-as-Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments.</li>
<li>Threat Modeling &amp; Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive adoption of secure design patterns.</li>
<li>Automated Guardrails at Scale - Design and deploy automated preventive and detective guardrails to proactively reduce risk across CICD pipelines, cloud and SaaS environments.</li>
<li>Security Culture &amp; Enablement - Cultivate a security-first culture across product, technology, and business teams by providing developer-friendly tooling, training, and reusable secure patterns that accelerate rather than hinder delivery.</li>
<li>Risk &amp; Issue Management - Act with urgency to manage emerging security issues, monitor risk indicators, and recommend resolutions. Serve as the escalation point for IT Risk and Cyber domains related to DevSecOps and Change Management.</li>
<li>Stakeholder Partnership - Partner with engineering leads, product owners, and vendors to ensure effective technology risk management, translating regulatory and policy requirements into actionable, engineer-friendly controls.</li>
<li>Audit &amp; Regulatory Support - Support audit, regulatory, and risk activities by providing evidence of control effectiveness and translating compliance requirements into automated, repeatable processes.</li>
<li>Continuous Improvement - Identify and address unfamiliar technology components, share best practices, and influence peers to drive continuous improvement in DevSecOps maturity across the organization.</li>
</ul>Required Qualifications, Capabilities, and Skills:
<ul><li>Advanced threat modeling experience (e.g., STRIDE-LM) for DevOps/CICD Pipelines and toolchains.</li>
<li>Expert ability to advise and influence secure pipeline architecture using Policy-as-Code and automated gates.</li>
<li>Hands-on security expertise in AWS and GCP.</li>
<li>Practical experience creating reference architectures and patterns for engineering teams.</li>
<li>Proven ability to design and deploy automated preventive and detective guardrails at scale.
</li><li>Expertise in leveraging IaC scanning to detect misconfigurations and compliance violations across Terraform and Kubernetes manifests</li>
<li>Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions</li>
<li>Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security.</li>
<li>Ability to solve design and functionality problems independently.</li>
<li>Strong written and verbal communication skills.</li>
<li>Demonstrated success in influencing peers and stakeholders.</li>
<li>Ability to evaluate and recommend emerging technologies for future state architecture.</li>
</ul>Preferred Qualifications, Capabilities, and Skills:
<ul><li>Shift-Left/Start-Left Evangelism - A proven track record of mentoring developers and fostering a culture where security is a shared responsibility</li>
<li>Relevant certifications: AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer, CISSP, CKS, OSCP.</li>
<li>Experience operating in regulated organizations with a 3LoD model.</li>
<li>Willingness to challenge existing processes respectfully.</li>
<li>Experience translating policy and regulatory requirements into control design for engineers and architects.</li>
<li>Proven ability to upskill and learn modern technologies.</li>
<li>Experience in financial services consumer businesses or Fintech organizations.</li>
</ul>#ICBCareers
ABOUT US
 
 
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. 
<div><div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. 
</div></div> 
 
ABOUT THE TEAM
 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Senior DevSecOps Architect

<div><div><h2 class="jobSectionHeader">WHO ARE WE</h2>

Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</div>
The Role

At Cognism, the security of our data, our systems and our clients' systems is a business priority. Information security is embedded in the way we work, and we are driving a culture where the fastest path is the securest path. As the function continues to mature, we are now hiring for a Director of Security Engineering &amp; Operations to report directly to our CISO. In this role you will own and drive the technical security strategy for Cognism's web and data products, as well as our corporate environment. You will be responsible for designing a security programme that protects our most sensitive assets: our data, our data fusion engine and the logic that powers it. As a trusted partner to our R&amp;D leadership team you will help to define and drive the long-term security engineering maturity roadmap, driving alignment across engineering leaders, product leadership and IT. If you're energised by the idea of shaping measurable security processes and controls, from the ground up, aligning engineering around secure-by-design principles, and elevating operational excellence, then this is the role for you. This is a rare opportunity to define the technical security vision for a dataintensive product at a moment where AI, scale, and engineering velocity are creating new and exciting challenges. You will shape how Cognism builds securely for the next decade. 


What success looks like

Within 12 months, you will have:
<ul>
<li>Delivered a unified security engineering roadmap aligned with engineering leadership.</li>
<li>Matured secure SDLC adoption across Web and Data engineering.</li>
<li>Improved MTTD/MTTR through stronger SOC operations.</li>
<li>Invested in and mentored a team with clear ownership, KPIs, and engineering trust.</li>
<li>Reduced engineering friction by creating pragmatic, developerfriendly guardrails</li></ul> 


What You'll Own

Security Strategy &amp; Engineering Integration
<ul>
<li>Define and own Cognism's technical security strategy that seeks to embed security-by-design within our web and data products, our data fusion engine and pipelines, and our corporate landscape. You will drive a strategy that is pragmatic, risk-ranked, and aligned to engineering velocity.</li>
<li>Work directly with product and technology leadership as a strategic partner. You will drive ownership and accountability, clearly agreeing ways of working between your team and product and technology teams.</li>
<li>Set and direct a secure SDLC strategy that engineers engage with, coaching and mentoring our application security engineer with running our threat modelling program, embedding security in CI/CD, and iteratively improving our vulnerability management processes.</li>
<li>Partner with engineering leadership to ensure risk-driven supply chain management across our product, ensuring what we bring in doesn't undermine what we protect.</li>
<li>Work directly with our Director of IT operations to ensure our corporate security posture is mitigating risk and empowering our employees to be as secure as possible, through guardrails that protect unacceptable risk but don't stifle innovation.</li></ul> 


Data &amp; AI Security
<ul>
<li>Partner with our VP of Data Engineering to strengthen the security of our enrichment engine, data pipelines, and warehouse ecosystems.</li>
<li>Direct a strategy that considers security across the full data stack - from ingestion through to the warehouse - with a focus on access governance, data classification, and secrets management as non-negotiables.</li>
<li>Define how Cognism embeds AI securely as LLMs and agentic workflows move deeper into the product and our technology teams' operations.</li>
<li>Partner with our CISO to shape and implement an AI security posture that is embedded in strong security foundations, helping us stay ahead of the threat landscape rather than reacting to it.</li></ul> 


Detection, Response &amp; SOC Partnership
<ul>
<li>Own the strategic relationship with our 24/7 outsourced SOC holding them to a high standard on threat hunting, threat intelligence utilisation, and automated response, not just SLA compliance.</li>
<li>Ensure Cognism has a holistic, well-maintained SIEM that reflects how we operate and improves continuously as the threat landscape evolves.</li>
<li>Build the internal team into a trusted escalation layer, with clear incident response playbooks, rehearsed escalation paths, and a feedback loop that sharpens detection over time.</li></ul> 


Team &amp; Culture 

<ul>
<li>Lead a team of application and infrastructure security engineers, setting the standard for technical excellence and deep partnership with their engineering counterparts.</li>
<li>Build a security culture where developers raise security questions early, understand threat models, and own remediations, not because policy requires it, but because the culture makes it natural.</li>
<li>Be the security leader Cognism's engineers want in the room: credible enough to be trusted, collaborative enough to be included, and strategic enough to make it count.</li></ul> 


What We Need

Leadership &amp; influence
<ul>
<li>Demonstrated experience building security programmes from scratch or transforming them significantly in a product-led, engineering-first company.</li>
<li>A track record of influencing engineering culture and earning trust, not enforcing it.</li>
<li>Experience managing external security partners, (e.g 24/7 Security Operations Centre, penetration testing 3rd parties) and raising their performance through clear accountability, not just contract reviews.</li>
<li>Able to communicate risk in business terms to exec and board audiences, and technical terms to engineers, without losing precision in either direction.</li></ul> 


Technical foundation
<ul>
<li>Strong AppSec expertise (OWASP, API security, SAST/DAST, SDLC) with practical threat modelling experience &ndash; enough to challenge and coach our most senior application security engineers.</li>
<li>Handson understanding of data security, cloud data warehouses, and pipeline integrity &ndash; enough to ensure we are driving the right programme of work across our technology department.</li>
<li>Cloud security fluency with working knowledge of container and Kubernetes security, IAM design, and cloud-native security tooling &ndash; enough to clearly identify, prioritise and challenge solutions for implementing security in our cloud environment.</li>
<li>Working knowledge of AI/LLM security risks: enough depth to assess integrations, define guardrails, and evolve the programme as the technology does.</li></ul> 


Mindset
<ul>
<li>Risk-based by instinct: prioritises based on both technical and business impact</li>
<li>Builder mentality: energised by creating structure where there isn't any, pragmatic about sequencing, and focused on outcomes over coverage.</li>
<li>Genuinely curious about AI, not just its security risks, but its potential to improve how security is done.</li>
</ul><div>
<h2 class="jobSectionHeader">WHY COGNISM</h2>

At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who support, challenge, and inspire each other every day. If you're looking for a place where your work truly makes an impact, you're in the right spot!

Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.

Here's what we stand for:

 We Own the Outcome Together. 
 We Deeply Understand our Customers. 
 We Celebrate Impact Wherever It Comes From.

At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</div></div>

Director, Security Engineering & Operations

HCLTech

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.HCLTech is a globally recognized leader in the Tech and IT industry, but we&rsquo;ve never forgotten the startup mindset that got us here. We&rsquo;ve always approached our work with an idea-first attitude because every one of our accomplishments &mdash;no matter how big or small &mdash;can be traced back to an idea&rsquo;s single spark.It&rsquo;s that spark &mdash;that inner drive &mdash;that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that&rsquo;s what drives you to be better, be more and ultimately, be more fulfilled.ROLE SUMMARYThe Senior Endpoint Engineer is responsible for engineering, enhancing, and supporting the organization&rsquo;s Azure Virtual Desktop (AVD) and Microsoft Intune environments for both physical devices and virtual workspaces. The role requires strong technical expertise, disciplined operational processes, and deep knowledge of endpoint technologies to ensure stable, secure, and efficient end‑user computing services across the enterprise. This position directly impacts nearly all users and plays a critical role in maintaining a reliable and secure endpoint ecosystem.ROLE RESPONSIBILITIES<ul><li>Drive to deliver technology and products in the roadmap on schedule and with the highest quality.</li><li>Provide advice, guidance, and direction to carry out plans and procedures, ensuring schedule attainment, product development process adherence and performance.</li><li>Provide last tier support for operations and support teams, including root cause analysis and preventative analysis.</li><li>Provide technical support with expert knowledge and act as an escalation point for the Desktop Operations team and anything related to the End User Computing environment, focusing on our Endpoint Security Protection, and application management.</li><li>Partner with other Engineering teams to develop solutions.</li><li>Manage the Azure Virtual Desktop (AVD) environment including creating images, deploy VMs, monitor VM performance.</li><li>Develop automated solutions for deploying software packages, application patches/updates and workstation images.</li><li>Engineer and support multiple Windows desktop images.</li><li>Manage the entire lifecycle of our global standard desktop and laptop models.</li><li>Design and implement Microsoft Intune solutions that meet end user requirements.</li><li>Create and manage Intune policies for application deployment, device compliance, and security configurations.</li><li>Ensure seamless integration with other Microsoft 365 services.</li><li>Windows 11 Provisioning: Design and deploy Windows 11 provisioning processes using Intune Autopilot. Configure and manage Windows Update for Business policies. Develop and maintain standardized 11 deployment images.</li><li>Active Directory Group Policy Management: Design and manage Group Policy Objects (GPOs) in Active Directory to enforce security and configuration policies. Collaborate with the Active Directory team to ensure alignment with broader infrastructure goals.</li><li>Security and Compliance: Implement security best practices and compliance policies within Intune. Monitor and respond to security incidents related to mobile devices and endpoints.</li><li>Documentation and Training: Create detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settings.</li><li>Maintain desktop images and modify SCCM task sequences as needed.</li><li>Package, test, and deploy new applications as needed.</li><li>Maintain and expand existing Knowledge Base.</li><li>Create new and maintain existing support documents to maintain high standards of quality in the delivery of End User Computing services.</li></ul>TECHNICAL QUALIFICATIONS<ul><li>8+ years total work experience, 5+ of those years with proven experience in designing and implementing Microsoft Intune solutions.</li><li>5 years&rsquo; experience as a system engineer.</li><li>Desktop engineering and support experience in an enterprise environment.</li><li>Proven experience with Windows 11, Active Directory Structure, and Managing Group Policies.</li><li>Experience developing and testing software packages using Install shield, or equivalent.</li><li>Skills managing a VDI environment (Azure Virtual Desktop preferred).</li><li>Expert level experience within End Point Protection Engineering.</li><li>Expertise in MECM and Intune.</li><li>Expert in patch management including bios and firmware updates, service pack upgrades, and application-based updates.</li><li>Basic Database Administration experience, particularly in SQL Server.</li></ul>GENERAL QUALIFICATIONS<ul><li>Proficient communication skills, both written and verbal.</li><li>Possess sound organization and problem-solving skills.</li><li>Excellent ability to work in a team environment.</li><li>Motivated to learn and grow professionally.</li></ul>EDUCATION REQUIREMENTS<ul><li>Bachelor&rsquo;s degree from an accredited college or university.</li></ul>Benefits:<ul><li>A supportive, diverse and global team with a brilliant culture.</li><li>Great opportunities to make the role your own, upskill yourself and get involved with exciting projects.</li><li>Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks &ndash; Engagement Champion to name a few.</li><li>To know more about us visit &ndash; www.hcltech.com</li><li>For more information on how we process your personal data, please refer to HCLTech&rsquo;s Candidate Data Privacy Notice.</li></ul>Pay: &pound;24,420.00-&pound;50,000.00 per yearWork Location: In person

Track Lead - MDM Intune

Explore 219+ Product security engineer in London this July. Find roles across top companies and apply now to boost your career.