Security Engineer

Job description

A LITTLE ABOUT US incident.io http://incident.io is the leading AI incident response platform, relied on by some of the best engineering teams in the world when things go wrong. Since launching in 2021, we've helped over 2,000 companies, including OpenAI, Netflix, and Airbnb, run more than 1 million incidents. The stakes are real, the talent is insane, and somehow it's a genuinely lovely place to work. We all pull our weight, go the extra mile, and put in the bit of magic most companies don't have time for, all while having fun and never taking ourselves too seriously. We've raised $96 million from Index Ventures, Insight Partners, and Point Nine, and we're growing fast. There's never been a better time to join. The role in one line You'll build incident.io http://incident.io's security function from the ground up, creating a product secure enough to support some of the best engineering teams in the world when things are going wrong. What that looks like day to day We built a new security team from scratch this year. We're now three people, and we're looking for our final two. We're generalists at heart, but for these roles we want people who can primarily focus on Governance, Risk and Compliance (GRC) or cloud security. The work is greenfield and you'll be deciding how security gets done at incident from first principles, not inheriting someone else's process. There's very little process here today which means you can move quickly rather than fight your way through approval chains. You'll have real autonomy over how you approach the work. The engineers you'll be working with are excellent, and they've already dealt with the easy problems. What's left for you is the genuinely hard stuff, the kind of work that's interesting precisely because it hasn't been solved yet. The role is a bit of a security buffet, but we want generalists who can primarily focus on either GRC or cloud security. We think of security as something that helps the business move, not something that slows it down. That means saying yes wherever we genuinely can, while still having the authority to block a release when something matters enough. We're heavy adopters of AI, and this role sits right in the middle of that. You'll have an unlimited Claude token budget to speed up your own work, review, testing, threat modelling, and you'll also be responsible for securing the AI features and AI driven workflows we're shipping into the product. Who you are - You're a generalist with a strong grounding in security, and real depth in GRC or cloud security specifically. You don't need both, but you go deep on at least one - You communicate well, you can deliver a hard piece of feedback to an engineer and have them thank you for it - You've got grit, you're building this function from close to scratch, and the hard days, the scary find in production, the process that doesn't exist yet, don't put you off - You live and breathe security, this isn't just the day job for you, it's something you genuinely geek out on SUPPORTING YOU We work hard and we think life outside work matters just as much. Our benefits pack is built to support both. - Private medical insurance. Seriously good cover - we want you and the people you love to be looked after. - Competitive annual leave. Showing up at your best requires switching off, and we make sure you have time to do that. - First Friday of every month off. Yes, seriously. - Enhanced pension. We put real money in, because future-you deserves better than an afterthought. - Meaningful equity. We're rapidly scaling, and everyone who helps shape the outcome should share in it. - Unlimited AI spend. For everyone, not just engineers. We're all-in on AI across the company, and we expect you to be too. - Generous parental leave. The early days with a new baby matter more than anything we're doing here, and we want you to be present for them. - Two budgets that have your back. £1000 to invest in your setup, £500 a year to invest in yourself.