Head of Security Engineering

Overview

As Head of Security Engineering, you will lead a security engineering function for a cloud-first health data organisation. You shape platform security, automation, and policy-as-code, while staying close to delivery to build alongside your team. You’ll ensure secure, scalable tooling and integrated security workflows across engineering squads. This role combines strategic direction with hands-on delivery and impact on compliance and risk posture. You’ll drive a secure-by-design culture and partner with leadership to prioritize technology investments.

Pay / Benefits

• salary 110,000+
• strong pension contribution
• generous holiday allowance
• family-friendly leave and wellbeing support
• salary-sacrifice benefits
• hybrid working with a London office

Responsibilities

• Lead and grow the security engineering team, setting priorities and managing delivery backlogs
• Drive an automation-first culture using Infrastructure as Code, policy-as-code, and CI/CD as default
• Stay hands-on in the design and delivery of key security solutions
• Maintain core security platforms to be reliable, secure and fit for purpose
• Integrate security tools and workflows into a coherent, end-to-end system
• Create self-service capabilities to help engineering teams make secure choices
• Leverage threat intelligence, risk insights and service metrics to guide improvements
• Advise senior leaders on technology direction and investment
• Support compliance activities, including ISO 27001

Key requirements

• Security engineering leader with a strong technical background and track record of developing engineers
• Extensive experience securing cloud-native environments, ideally Azure
• Strong Terraform and Infrastructure as Code skills, plus CI/CD and secure development practice
• Solid grounding in IAM, vulnerability management and defensive security controls
• Experience building and running security platforms in Agile, product-led teams
• Clear communication with both technical and non-technical stakeholders

• leadership
• collaboration
• clear communication
• Terraform / Infrastructure as Code
• CI/CD
• cloud security in Azure

…