Security Engineer
Posted 2 Oct 2026
Advertised as “Lead Security Engineer”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 7–8 yrs
- Management level
- Individual contributor
- Employment
- On-Site
- Contract
- Full-time
No salary listed for this role.
About us
Encord is the universal data layer for AI that helps 300+ AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production.
Trusted by Woven by Toyota, AXA, UiPath, Zipline, and more. We're an ambitious team of 100+ working at the frontier of AI and have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator.
About the role
We're looking for a Lead Security Engineer to own and mature how Encord secures its people, identities, devices, and the SaaS and AI tools we run the business on. You'll be hands-on, building and running controls yourself, while also owning the organisation security programme and acting as the go-to security expert across the company.
You'll play a key role in protecting our leadership team from targeted attacks, serve as the technical backbone of our ISO 27001 and SOC 2 programmes, and partner with our DevOps and Platform teams on cloud security. Above all, you'll help us stay safe while keeping our pace.
What you'll do
-
Own identity and access across Encord, including SSO, MFA, conditional access, and automated joiner/mover/leaver processes.
-
Manage our device security, keeping our macOS fleet protected through MDM and EDR.
-
Run SaaS and AI security: discovering shadow IT, reviewing app permissions, assessing new tools before adoption, and setting sensible guardrails for how AI tools are used.
-
Protect our executives and high-risk users from targeted phishing, impersonation, business email compromise, and AI-enabled fraud such as deepfakes.
-
Act as the technical owner of our ISO 27001 and SOC 2 controls, from policies and evidence through to auditor walkthroughs.
-
Lead third-party and vendor risk assessments.
-
Respond to and lead security incidents, and continuously improve how we detect and handle them.
-
Partner with DevOps and Platform to secure our cloud environment.
-
Write clear policies and runbooks, and roll out changes in a way that keeps the employee experience smooth.
What you'll bring
-
Around 7–8 years of hands-on security experience, with a strong focus on organisation security.
-
Experience rolling out or re-architecting SSO, MFA, and conditional access across a company.
-
Experience deploying and managing MDM and EDR across a macOS fleet.