senior software engineer

ai engineer

software engineer

artificial intelligence engineer Jobs in London

artificial intelligence engineer

platform engineer

security architect

Anthropic

<div><div><h2 class="jobSectionHeader">About Anthropic</h2>

Anthropic&rsquo;s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.</div><div>
About the role:

As an Applied AI Security Architect, you will serve as Anthropic's trusted security expert for our most demanding enterprise customers. You'll engage directly with CISOs, security architects, compliance officers, and technical leaders at the largest financial institutions, insurers, and other highly regulated enterprises across EMEA to address their most critical questions about deploying Claude safely and securely &mdash; including the security capabilities of our latest generations of Claude models.

This is a pre-sales technical role focused on security, compliance, networking, and data architecture. Your job is to walk into a room full of security professionals and demonstrate deep expertise in enterprise security, regulatory compliance, and data protection.

Whether you've been a Security Architect, Solutions Architect, Field CTO, or senior pre-sales engineer, what matters is that you understand how large European institutions evaluate and adopt technology, and can speak credibly to their security and compliance concerns. This is a senior role: you will own our most complex and escalated security conversations in the region, often as the decisive technical voice in front of a CISO.

We are looking for someone excited to help define how European enterprises should think about security and compliance in the age of AI. How do MCP, autonomous agents, and RBAC work together? How do you deploy frontier models in line with GDPR, EU data residency, and the EU AI Act? If working at the intersection of AI adoption and regulated industries excites you, this is the role for you.

Responsibilities:
<ul>
<li>Serve as the primary security and compliance expert in customer engagements, addressing technical questions about Claude's architecture, data flows, encryption, access controls, and deployment models.</li>
<li>Partner with CISOs, security architects, compliance teams, and DPOs to understand their security requirements and design solutions that meet European regulatory standards (GDPR, EU AI Act, DORA, NIS2, SOC 2, PCI-DSS, and national regulator expectations).</li>
<li>Lead technical deep-dives on network architecture, EU data residency, data retention and Zero Data Retention (ZDR) policies, cross-border data transfers, API security, authentication/authorization, audit logging, and integration patterns for regulated environments.</li>
<li>Support enterprise security reviews, vendor assessments, and due diligence with detailed technical documentation and expert guidance.</li>
<li>Guide customers through EU AI Act readiness, DORA, and NIS2, and position Anthropic within the European competitive landscape.</li>
<li>Collaborate with Sales and Applied AI teams from initial conversations through deployment.</li>
<li>Partner closely with Anthropic&rsquo;s product and engineering teams to understand Claude's security capabilities, relay customer feedback, and influence the roadmap.</li>
<li>Develop security-focused collateral, reference architectures, and best practices for regulated industries.</li>
<li>Travel regularly across EMEA for security workshops, architecture reviews, and strategic account meetings.</li>
</ul>
You may be a good fit if you have:
<ul>
<li>7+ years of experience in enterprise security, cloud architecture, or technical pre-sales, with significant exposure to regulated industries in EMEA (financial services, insurance, healthcare).</li>
<li>Deep technical knowledge of enterprise security concepts: network security, identity and access management, encryption (at rest and in transit), API security, and audit/logging requirements.</li>
<li>Deep working knowledge of GDPR (data residency, data retention and Zero Data Retention, international transfers, DPIAs) and strong familiarity with the EU AI Act as it applies to foundation models.</li>
<li>Experience navigating compliance frameworks relevant to European financial services and insurance (DORA, NIS2, SOC 2, PCI-DSS, and national regulators' guidance on AI/ML such as FCA/PRA, BaFin, ACPR, FINMA).</li>
<li>A track record of leading complex, high-stakes engagements with CISOs, security teams, and compliance officers at large European enterprises.</li>
<li>Strong understanding of cloud architecture and deployment models (AWS, Azure, GCP), including VPCs, private endpoints, hybrid connectivity, and the European sovereign cloud landscape.</li>
<li>Excellent communication skills: able to explain complex security topics to technical and non-technical audiences.</li>
<li>Fluent English; additional European languages are a strong plus.</li>
<li>A good understanding of the EMEA enterprise AI market and competitive landscape.</li>
<li>The ability to navigate ambiguity and move fast in a rapidly evolving market.</li>
<li>A collaborative mindset: sales at Anthropic is a team sport.</li>
<li>Excitement about AI's potential to transform highly regulated industries, and a genuine desire to help customers adopt it safely and responsibly.</li>
</ul></div><div><div><div><div>
The annual compensation range for this role is listed below.

For sales roles, the range provided is the role&rsquo;s On Target Earnings (&quot;OTE&quot;) range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.</div></div>
Annual Salary:
&pound;190,000 - &pound;230,000 GBP</div></div><div><h2 class="jobSectionHeader">
Logistics</h2>

Minimum education: Bachelor&rsquo;s degree or an equivalent combination of education, training, and/or experience

Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience

Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position

Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.

Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.

We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. 
 
Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links&mdash;visit anthropic.com/careers directly for confirmed position openings.
<h2 class="jobSectionHeader">
How we're different</h2>

We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact &mdash; advancing our long-term goals of steerable, trustworthy AI &mdash; rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.

The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI &amp; Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
<h2 class="jobSectionHeader">
Come work with us!</h2>

Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.</div></div>

Applied AI Security Architect

JPMorganChase

<div>JOB DESCRIPTION 
 
 
Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that prioritize security from the start.
Job Summary:
As a Senior DevSecOps Architect in the Cybersecurity &amp; Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy, and serving as the subject matter expert for the DevSecOps strategy as well as embedding automated security controls into CI/CD pipelines. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.
Job Responsibilities:
<ul><li>Pipeline Security Architecture - Design, implement, and continuously improve security architecture for CI/CD pipelines and DevOps toolchains, ensuring automated security checks are embedded at every stage from code commit to production deployment.</li>
<li>Security-as-Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments.</li>
<li>Threat Modeling &amp; Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive adoption of secure design patterns.</li>
<li>Automated Guardrails at Scale - Design and deploy automated preventive and detective guardrails to proactively reduce risk across CICD pipelines, cloud and SaaS environments.</li>
<li>Security Culture &amp; Enablement - Cultivate a security-first culture across product, technology, and business teams by providing developer-friendly tooling, training, and reusable secure patterns that accelerate rather than hinder delivery.</li>
<li>Risk &amp; Issue Management - Act with urgency to manage emerging security issues, monitor risk indicators, and recommend resolutions. Serve as the escalation point for IT Risk and Cyber domains related to DevSecOps and Change Management.</li>
<li>Stakeholder Partnership - Partner with engineering leads, product owners, and vendors to ensure effective technology risk management, translating regulatory and policy requirements into actionable, engineer-friendly controls.</li>
<li>Audit &amp; Regulatory Support - Support audit, regulatory, and risk activities by providing evidence of control effectiveness and translating compliance requirements into automated, repeatable processes.</li>
<li>Continuous Improvement - Identify and address unfamiliar technology components, share best practices, and influence peers to drive continuous improvement in DevSecOps maturity across the organization.</li>
</ul>Required Qualifications, Capabilities, and Skills:
<ul><li>Advanced threat modeling experience (e.g., STRIDE-LM) for DevOps/CICD Pipelines and toolchains.</li>
<li>Expert ability to advise and influence secure pipeline architecture using Policy-as-Code and automated gates.</li>
<li>Hands-on security expertise in AWS and GCP.</li>
<li>Practical experience creating reference architectures and patterns for engineering teams.</li>
<li>Proven ability to design and deploy automated preventive and detective guardrails at scale.
</li><li>Expertise in leveraging IaC scanning to detect misconfigurations and compliance violations across Terraform and Kubernetes manifests</li>
<li>Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions</li>
<li>Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security.</li>
<li>Ability to solve design and functionality problems independently.</li>
<li>Strong written and verbal communication skills.</li>
<li>Demonstrated success in influencing peers and stakeholders.</li>
<li>Ability to evaluate and recommend emerging technologies for future state architecture.</li>
</ul>Preferred Qualifications, Capabilities, and Skills:
<ul><li>Shift-Left/Start-Left Evangelism - A proven track record of mentoring developers and fostering a culture where security is a shared responsibility</li>
<li>Relevant certifications: AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer, CISSP, CKS, OSCP.</li>
<li>Experience operating in regulated organizations with a 3LoD model.</li>
<li>Willingness to challenge existing processes respectfully.</li>
<li>Experience translating policy and regulatory requirements into control design for engineers and architects.</li>
<li>Proven ability to upskill and learn modern technologies.</li>
<li>Experience in financial services consumer businesses or Fintech organizations.</li>
</ul>#ICBCareers
ABOUT US
 
 
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. 
<div><div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. 
</div></div> 
 
ABOUT THE TEAM
 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Senior DevSecOps Architect

Bridewell

<div>Start Date: 14th September 2026
About Bridewell
One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world&rsquo;s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.
Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.
The Opportunity
In the first three months of the Bridewell Academy, you will undergo comprehensive onboarding, where you will meet your manager and assigned buddy, who will guide you through the initial stages of your journey. During this period, you will gain exposure to our Cloud Engineering team, allowing you to familiarise yourself with cloud architecture, modern engineering practices, and the Microsoft 365 security stack &mdash; including Microsoft Defender (XDR), Microsoft Sentinel, and Microsoft Purview &mdash; alongside equivalent capabilities across other hyper-scalers. You will complete foundational training, such as the Microsoft Certified: Azure Fundamentals (AZ-900), Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), and AWS Certified Cloud Practitioner courses, and become acquainted with our learning management systems, setting a solid foundation for your professional development.
As you progress into the three to six-month mark, you will begin shadowing and contributing to client-facing cloud projects, where you'll apply your skills in real-world scenarios. This hands-on experience will be invaluable as you collaborate with senior consultants on deployments, configuration tasks, and technical documentation across Microsoft Azure, Microsoft 365, AWS, and GCP environments &mdash; with early exposure to security tooling such as Microsoft Defender, Microsoft Entra and Microsoft Sentinel.
Between six to eighteen months, you will continue working on client-facing projects both independently and as part of a squad, enhancing your practical experience in the field. During this time, you will focus on completing essential certifications such as:
<ul><li>Microsoft Certified: Azure Administrator Associate (AZ-104)</li><li>
Microsoft Certified: Security Operations Analyst Associate (SC-200)</li><li>
Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-401)
</li><li>Microsoft Certified: Cloud and AI Security Engineer (SC-500)</li><li>
AWS Certified Solutions Architect &ndash; Associate or Google Associate Cloud Engineer</li></ul>
Achieving these qualifications will further prepare you for your future role, culminating in your pathway to becoming academy certified. This structured progression ensures you are well-equipped with the knowledge and hands-on experience needed to thrive in a modern multi-cloud and cloud-security engineering career. 
Requirements 
Responsibilities<ul><li>
Support Client Engagements: Assist in the delivery of high-quality cloud engineering projects. Help clients design, deploy, and operate workloads across Microsoft Azure, Microsoft 365, AWS, and GCP, contributing to activities such as landing zone builds, identity and access configuration, network design, and the deployment and tuning of Microsoft Defender, Microsoft Sentinel, and Microsoft Purview alongside equivalent native security services in other clouds.</li><li>
Stay Informed: Actively engage in professional development by attending relevant training sessions, hackathons, vendor workshops (Microsoft, AWS, Google), and industry conferences to remain current with the latest cloud services, security tooling, architectural patterns, and engineering best practices.</li><li>
Collaborate with Consultants: Work closely with senior cloud and security engineers on project tasks &mdash; helping to gather requirements, build proofs-of-concept, author detections and analytics rules in Sentinel, configure Defender policies, script automation (e.g. PowerShell, KQL, Bicep, Terraform, ARM, CloudFormation), and prepare technical documentation to ensure project objectives are met efficiently and effectively.</li><li>
Participate in Team Meetings: Join regular squad stand-ups, design reviews, and retrospectives to discuss project progress, share insights, and gather feedback, fostering a collaborative engineering culture and enhancing your personal learning.</li><li>
Conduct Technical Research: Help with preliminary research on emerging cloud and security services, reference architectures, and comparative analysis between vendors (Azure/M365 vs. AWS vs. GCP) to support project work and internal capability development.</li><li>
Engage with Clients: Participate in client meetings, technical workshops, and whiteboarding sessions as needed, providing support and gathering information to understand client requirements and contribute to high-quality service delivery.</li></ul>
Experience<ul><li>
A degree in Computer Science, Cloud Computing, Cyber Security, an equivalent qualification, or completion of a cloud/engineering-focused training course or bootcamp.</li><li>
Minimum grade of 4/C in GCSE English Language and Maths (or equivalent).</li><li>
Three A-levels or five Highers (or equivalent).</li><li>
No work experience is needed as this is an entry-level position. We are looking for someone who will show potential for these roles through their transferable skills. Curiosity about cloud and security technology, confidence, relationship building, and a self-starter mentality are all welcome &mdash; alongside a huge eagerness to learn and build!</li></ul> 

Benefits 
Why join us?
Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn&rsquo;t end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:
<ul><li>25 Days Holiday - Plus buy and sell options
</li><li>Flexible Working (around core office hours)
</li><li>Company Pension
</li><li>Employee Shareholder Scheme
</li><li>Personal Day &amp; Birthday Off - After 1 year of service
</li><li>Family Leave &ndash; After 1 year of service
</li><li>Life Assurance
</li><li>Electric Vehicle Scheme &amp; Cycle to Work Scheme</li><li>
Private Healthcare (incl. Gym discounts and vison care)</li></ul>
Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion, in particular our London office.
Note: To be eligible for this job you must either hold UK Security Clearance or be eligible and willing to go through this security clearance Bridewell values diversity and is an equal opportunity employer. We are dedicated to fostering an inclusive environment where all employees feel respected, supported, and empowered to do their best work. If you require any reasonable adjustments throughout the interview process please let us know.</div>

Academy Cloud Security Consultant

Intercom

<div><div>Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences.

Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey &ndash; from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk for one single system that is designed to meet the needs of modern day support teams.

Founded in 2011, Fin became one of the fastest growing companies and remains one of the largest private software companies in the world with nearly 30,000 global businesses using our products to transform their customer support. Driven by our core values, we push boundaries, build with speed and intensity, and relentlessly deliver incredible value to our customers.</div><div><h2 class="jobSectionHeader">
What's the opportunity?</h2>

Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission.

The Cloud Security team is responsible for protecting the platforms that power Fin. We partner closely with infrastructure and product engineering teams to secure cloud environments, detect emerging threats, respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms and production systems that underpin every Fin customer interaction.

The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how our cloud platforms, production systems, and engineering workflows are designed, deployed, and operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape.
<h2 class="jobSectionHeader">
What will I be doing?</h2>
<ul><li>Design and implement secure cloud architectures across our AWS environments.</li>
<li>Build and maintain protective and detective controls that improve visibility into threats across our cloud environments.</li>
<li>Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response.</li>
<li>Lead cloud security investigations and incident response activities in partnership with engineering teams.</li>
<li>Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during security incidents.</li>
<li>Build automation that improves the scalability, reliability, and effectiveness of security controls.</li>
<li>Partner with infrastructure teams to embed security into cloud platforms, infrastructure-as-code workflows, and engineering practices.</li>
<li>Develop and improve cloud security standards, guidance, and best practices across Fin.</li>
<li>Drive security initiatives from problem definition through design, implementation, and measurable outcomes.</li>
<li>Assess emerging threats to cloud environments and help evolve our defensive capabilities.</li>
<li>Help shape Fin's AI-first approach to security, including AI-assisted detection, automated investigations, continuous monitoring, and emerging defensive capabilities.</li>
<li>Support the secure adoption of AI-assisted software development tools and engineering workflows.</li>
</ul><h2 class="jobSectionHeader">What skills do I need?</h2>
<ul><li>Proven experience in cloud security, security engineering, detection engineering, or a closely related field.</li>
<li>Strong experience securing and operating production AWS environments.</li>
<li>Deep understanding of cloud security principles, modern attack techniques, and security best practices.</li>
<li>Experience building or operating detection, monitoring, or threat detection capabilities.</li>
<li>Hands-on experience investigating security incidents, leading technical investigations, and driving remediation efforts.</li>
<li>Experience implementing security controls across cloud platforms and production environments.</li>
<li>Strong programming skills and experience building automation, tooling, or operational workflows.</li>
<li>Experience working with infrastructure-as-code practices and modern cloud-native technologies.</li>
<li>Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness.</li>
<li>Ability to communicate security concepts clearly and collaborate effectively with engineering teams.</li>
<li>A pragmatic approach to balancing security, customer impact, and engineering velocity.</li>
</ul><h2 class="jobSectionHeader">Bonus skills &amp; attributes</h2>
<ul><li>Experience building detection engineering, threat hunting, or security operations capabilities at scale.</li>
<li>Experience with cloud-native security platforms, CNAPP technologies, or large-scale cloud security monitoring.</li>
<li>Experience applying AI to detection, response, threat analysis, or security operations workflows.</li>
<li>Familiarity with AWS networking, identity, and cloud security patterns.</li>
<li>Experience working across both large-scale SaaS environments and high-growth companies.</li>
</ul><h2 class="jobSectionHeader">Benefits</h2>

We are a well treated bunch, with awesome benefits! If there&rsquo;s something important to you that&rsquo;s not on this list, talk to us!
<ul>
<li>Competitive salary and equity in a fast-growing start-up</li>
<li>We serve lunch every weekday, plus a variety of snack foods and a fully stocked kitchen</li>
<li>Regular compensation reviews - we reward great work!</li>
<li>Unlimited access to Claude Code and best-in-class AI tools; experimentation &amp; building is encouraged &amp; celebrated.</li>
<li>Pension scheme &amp; match up to 4%</li>
<li>Peace of mind with life assurance, as well as comprehensive health and dental insurance for you and your dependents</li>
<li>Flexible paid time off policy</li>
<li>Paid maternity leave, as well as 6 weeks paternity leave for fathers, to let you spend valuable time with your loved ones</li>
<li>If you&rsquo;re cycling, we&rsquo;ve got you covered on the Cycle-to-Work Scheme. With secure bike storage too</li>
<li>MacBooks are our standard, but we also offer Windows for certain roles when needed.</li>
</ul>
#LI-Hybrid</div><div>
Policies

Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week.

We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our core values.
Fin values diversity and is committed to a policy of Equal Employment Opportunity. Fin will not discriminate against an applicant or employee on the basis of race, color, religion, creed, national origin, ancestry, sex, gender, age, physical or mental disability, veteran or military status, genetic information, sexual orientation, gender identity, gender expression, marital status, or any other legally recognized protected basis under federal, state, or local law.</div></div>

Cloud Security Engineer

Cognism

<div><div><h2 class="jobSectionHeader">WHO ARE WE</h2>

Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</div>
THE ROLE

The Senior Application Security Engineer is a key member of Cognism's Information Security Team, reporting into the Application &amp; Infrastructure Security Manager. Your mission is to embed security by design across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path.

You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception &ndash; all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day.

This role is ideal for a senior IC who is technical, collaborative, and pragmatic, with the ability to influence engineering teams while driving hands on improvements to Cognism's secure SDLC.

KEY RESPONSIBILITIES

Security by Design &amp; Product Integration
<ul>
<li>Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.</li>
<li>Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.</li>
<li>Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning.</li>
</ul>
Application Risk Assessment &amp; AI Security
<ul>
<li>Identify and assess application risks across Cognism's SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.</li>
<li>Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.</li>
<li>Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets.</li>
</ul>
Secure SDLC &amp; DevSecOps Enablement
<ul>
<li>Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.</li>
<li>Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).</li>
<li>Drive automation and developer-friendly security processes that minimize friction and support rapid delivery.</li>
</ul>
Threat Modelling &amp; Architecture Support
<ul>
<li>Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.</li>
<li>Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.</li>
<li>Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.</li>
<li>Maintain and expand Cognism's secure coding standards, guidance, and reusable security patterns.</li>
</ul>
Application Security Testing &amp; Engineering
<ul>
<li>Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.</li>
<li>Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.</li>
<li>Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies.</li>
</ul>
Collaboration, Education &amp; Influence
<ul>
<li>Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape.</li>
<li>Deliver security training, workshops, and guidance to improve engineering teams' security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders.</li>
</ul>
CORE COMPETENCIES
<ul>
<li>Strong technical depth in application security, cloud security, and secure development.</li>
<li>Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.</li>
<li>Deep understanding of communication protocols used for web development is a must-have.</li>
<li>Hands on experience with web application development, specifically for back-end development is a must-have competency.</li>
<li>Risk-Based Prioritization: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a &quot;risk-driven&quot; rather than &quot;compliance-driven&quot; mindset. Comfortable balancing security risk with product and commercial realities.</li>
<li>Contextual Communication: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners.</li>
<li>Collaborative Conflict Resolution: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience. Pragmatic problem solver with a growth mindset and bias toward action.</li>
<li>Architectural Empathy: Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles.</li>
</ul>
EDUCATION &amp; EXPERIENCE
<ul>
<li>5&ndash;10+ years of experience in Application Security, Product Security, or Security Engineering roles.</li>
<li>Strong experience securing cloud native SaaS platforms (AWS preferred) and Data pipelines.</li>
<li>Handson experience with secure coding, application testing, and CI/CD security automation.</li>
<li>Experience working closely with engineering and product teams in agile environments.</li>
<li>Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.</li>
<li>Experience evaluating and securing AI/ML enabled features is a strong advantage.</li>
<li>Experience in SME or high-growth SaaS environments preferred.</li>
</ul><div>
<h2 class="jobSectionHeader">WHY COGNISM</h2>

At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who support, challenge, and inspire each other every day. If you're looking for a place where your work truly makes an impact, you're in the right spot!

Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.

Here's what we stand for:

 We Own the Outcome Together. 
 We Deeply Understand our Customers. 
 We Celebrate Impact Wherever It Comes From.

At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</div></div>

Senior Application Security Engineer

Resolution

<div><h1 class="jobSectionHeader">About Resolution</h1>
Resolution does research on how to align artificial superintelligence (ASI). ASI may be developed in the next few years, but it is unclear whether alignment is on track to be ready in the same timeframe. We aim at higher a priori confidence in aligned outcomes by pursuing a portfolio of theory and empirics bets, any one of which &mdash; if it succeeds &mdash; would meaningfully advance the field. We invest heavily in research automation to accelerate progress, and we believe that stronger alignment theory unlocks higher automation: more principled approaches give us better filters for which directions of automated research are promising.
Resolution was founded in 2026 by researchers from UK AISI's Alignment Team, who ran the &pound;30m Alignment Project, and Timaeus, who pioneered applying singular learning theory to alignment.
For more information, see our announcement.<h1 class="jobSectionHeader">
About the Team</h1>
Resolution's work will involve sensitive frontier-relevant research and partnerships with AI labs. This role exists both to protect that work and to enable it: good security is what makes deeper lab partnerships possible. We draw a distinction between two closely related areas of security:<ul><li>
Research &amp; infrastructure security. Securing how research actually runs: CI/CD pipelines, automated research agents, multi-cloud compute, and code/data/model-weight handling.</li><li>
Corporate IT &amp; security. The endpoint, identity, and collaboration scaffolding a distributed research org runs on, in combination with the compliance frameworks that unlock lab partnerships.</li></ul>
This role focuses on the latter, covering security on the operational side of the organization. You would report to senior leadership and work closely with our security and operations teams (as well as with our engineering team).
In practice, we expect to grow the security team one hire at a time, so your initial set of responsibilities is likely to span both areas. We expect the distinction to clarify over time.<h2 class="jobSectionHeader">
About the Role</h2>
We are looking for a hands-on, strategic leader to build and own our Corporate IT and Security function from the ground up. As we scale from our current team to 40&ndash;60 FTEs over the next two years, you will be the single point of accountability for ensuring our researchers have the tools they need to move fast while maintaining a security posture that earns the trust of external partners and AI labs.
We are looking for a builder, not just a manager. You should be comfortable getting into the weeds of configuration and implementation, but you understand that your ultimate goal is to enable world-class research through secure infrastructure.<h2 class="jobSectionHeader">
Responsibilities</h2>
1. Secure Research Infrastructure (Endpoint &amp; Device Management)<ul><li>
Design and deploy a secure-by-default environment for a diverse workforce, spanning in-person teams in Berkeley and remote researchers globally.</li><li>
Manage endpoint security (MDM/EDR) for a hybrid fleet, ensuring that researchers can interact with high-value research code and data safely without sacrificing velocity.</li></ul>
2. Identity and Access Management (IAM)<ul><li>
Implement a robust Zero-Trust architecture. You will define the lifecycle of identities for our staff, collaborators, and automated research agents.</li><li>
Ensure rigorous access control management, balancing the open-science nature of our publication goals with the extreme sensitivity of our pre-publication research and model access requirements.</li></ul>
3. Communications and Email Security<ul><li>
Secure our communication channels. As an organization that may become a high-value target for state actors and competitive intelligence gathering, you will implement advanced email security, phishing protection, and secure collaborative workflows.</li></ul>
4. Security Architecture as an Enabler<ul><li>
Act as the primary bridge between our research needs and the security requirements of external AI labs.</li><li>
Help us navigate the security audits required to gain and maintain access to frontier models, turning compliance into an accelerator for our research agenda.</li></ul><h2 class="jobSectionHeader">
You May Be a Good Fit If You</h2><ul><li>
Are a hands-on operator with a technical background and are comfortable configuring systems, scripting automation, and personally setting up the stack.</li><li>
Understand the threat model of a high-stakes research organization and can balance extreme security with an AI lab's &quot;move fast&quot; requirements.</li><li>
Have built an IT and/or security function from scratch and can operate with autonomy and ambiguity in an early-stage org.</li><li>
Can translate technical security requirements into plain English for researchers, theorists, and leadership.</li><li>
Are familiar with compliance frameworks (SOC 2, ISO 27001) and partner-lab security requirements.</li><li>
Are willing to use AI tools aggressively in your own workflow, with appropriate care to not get fooled!</li><li>
Are motivated by alignment of artificial superintelligence (ASI) and want to contribute to it full-time.</li></ul><h2 class="jobSectionHeader">
Why This Role is Unique</h2>
At most organizations, IT and Security are viewed as overhead. Here, your work is a core component of the research strategy. By securing our operations, you enable the collaboration and external partnerships that allow our researchers to access sensitive models and data to accelerate progress. You will help define the operational security standards for a new generation of AI safety organizations.<h1 class="jobSectionHeader">
Logistics</h1>
Salary: Your salary depends on the scope, autonomy, and impact we expect you to have while working at Resolution. The expected range of in-person salaries for this role is:<ul><li>
L4 (SWE II): $346,000
</li><li>L5 (Senior SWE): $451,000
</li><li>L6 (Staff SWE): $670,000
</li><li>L7 (Senior Staff SWE): $930,000
</li></ul>We level using an internal adaptation of Google's standard levelling; the band above is indicative of where a strong candidate might come in.
Location: Berkeley, California. Remote may be considered in exceptional cases.
Benefits:<ul><li>
5 weeks of paid vacation per year, in addition to public holidays.</li><li>
Comprehensive healthcare insurance (medical, dental, vision).</li><li>
Unlimited sick leave to prioritize your well-being.</li><li>
An unconditional 401(k) contribution equal to 4% of your salary.</li></ul>
Visa sponsorship: We can't guarantee visa sponsorship, though this will be possible in some circumstances.
Minimum education: A bachelor's degree in a field relevant to the role, or an equivalent combination of education, training, and/or professional experience that demonstrates comparable knowledge.
Deadline: Applications are rolling &mdash; please apply ASAP. We'll respond to applications within one week of receipt.
Start date: ASAP.
Compensation Range: $346K - $930K</div>

Security Engineer (Corporate IT)

Marks & Spencer

Specialist Security Consultant

Explore 155+ Security architect in London this July. Find roles across top companies and apply now to boost your career.