About the role
You’ll be VaultSpeed’s first dedicated security engineer, working alongside a three-person Platform team. The security foundations and policies are already in place. Your job is to turn them into everyday practice: implement controls, automate processes, set standards for the team and report on risk.

Expect a mix of roughly half compliance, a quarter hands-on security engineering, and a quarter automation and improvement work. You’ll have a lot of freedom to decide how things get done.

What you’ll do

• Own ISO 27001 compliance day to day: maintain controls and evidence, coordinate access reviews, support risk assessments and audits, and automate as much of it as possible
• Roll out and manage device management (MDM) for company laptops: enrolment, security baselines, encryption, patching and secure offboarding
• Build and maintain automated security scanning in CI/CD pipelines, covering code, dependencies, secrets, container images and infrastructure as code, and help developers fix what it finds
• Set security standards and guardrails for engineering, and write clear policies that explain why they matter
• Track vulnerabilities, assess their impact and report risks in plain terms to the team and management
• Automate manual security and IT processes
• Work with Platform on cloud, identity and container security, and take part in incident response