Senior Security Engineer

Overview

As Senior Security Engineer at hyperexponential, you help shape how security operates in a modern, autonomous security model. You will own security reviews, extend tooling, and implement fixes directly in code or infrastructure. You’ll work closely with engineering teams to embed security into product development and guide AI adoption with practical risk controls. This role offers hands-on impact at scale, shaping security culture across a multi-product platform used by top insurers. You’ll join a small, empowerment-driven team that values craftsmanship and tangible results.

Pay / Benefits

• 5,000 training and conference budget
• 33 days holiday including bank holidays
• Company pension via Penfold
• Mental health support via Spectrum.life
• Wellbeing allowance via Juno
• Private healthcare via AXA

Responsibilities

• Extend and maintain security tooling (CSPM, SAST, SCA, secret scanning) across engineering and IT environments
• Identify security gaps in cloud, dependencies, secrets, and code; drive remediation with owning teams
• Write code and modify infrastructure to fix issues and improve tooling
• Own end-to-end security reviews for designs and changes, guiding teams to resolution
• Complete a medium-sized security project within the first three months
• Collaborate with IT on authentication, authorization, and security hygiene in the corporate environment
• Guide teams on secure AI adoption and mitigate AI-specific risks
• Support ISO 27001 and SOC 2/compliance efforts by implementing and evidencing controls
• Be a trusted security advisor, owning issues raised with technical teams from start to finish

Key requirements

• Secured AWS cloud environments with hands-on tooling to identify and fix weaknesses
• Experience securing containerized workloads and infrastructure-as-code
• Proficiency with SAST, SCA, and secret scanning tools; able to triage findings and ship fixes
• Experience supporting ISO 27001, SOC 2, or GDPR compliance with technical controls
• Experience using AI to improve security work and understanding AI risks (data leakage, prompt injection)
• Ability to address non-technical risks and drive cross-team collaboration; strong communication to explain concepts and influence implementations
• Owns security initiatives from initiation to completion

• ownership
• clear communication
• influence and collaboration
• AWS cloud security
• Cloud Security tooling
• Container security

…