Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

XYZ Reality is seeking an experienced Senior Security & Compliance Engineer to own security across the business and build a scalable security capability. This is a critical, hands-on technical role within the Engineering team, focused on security architecture, cloud security, application security, and responding to emerging threats, including AI-related risks. While compliance is important, the primary focus is on technical security expertise.

Responsibilities

Take ownership of security architecture and technical security across XYZ Reality’s technology environment.
Assess current security posture, identify vulnerabilities and control gaps, and develop remediation plans.
Architect and strengthen security across Azure cloud environment, including Kubernetes clusters, databases, and data pipelines.
Own and improve IAM, zero-trust networking, secrets management, RBAC, pod security, and encryption.
Embed shift-left security into engineering workflows, integrating SAST, DAST, dependency scanning, and SCA into CI/CD pipelines.
Partner with Engineering and Product teams on architectural decisions, technical trade-offs, and secure-by-design development.
Run threat-modelling exercises and support developers with secure coding practices.
Own vulnerability management, including triage, risk prioritisation, remediation tracking, and incident response.
Develop and improve logging, monitoring, and alerting capabilities for security threats.
Assess emerging threats, including AI-related risks, and evolve the security approach.
Strengthen SOC 2 Type II and ISO 27001 controls, identifying gaps and improving implementation.
Support compliance cycles including controls testing, evidence gathering, and auditor coordination.
Support GDPR and data residency requirements.
Engage with enterprise customers and prospects on security posture.
Automate security controls and processes.
Help establish standards, tooling, and operating models for a scalable security capability.

Requirements

Demonstrable in-depth hands-on technical security experience, ideally spanning application, cloud, and/or infrastructure security.
Strong technical security capability and confidence to own security decisions end-to-end.
Strong cloud security experience, ideally Azure (or significant AWS/GCP with ability to transition).
Hands-on experience securing Kubernetes/containerised environments.
Experience integrating security tooling into CI/CD environments.
Experience with infrastructure-as-code security and technologies such as Terraform, Helm, or GitOps.
Understanding of application and API security.
Experience identifying vulnerabilities, assessing technical risk, and driving remediation.
Comfortable writing automation using Python, Go, Bash, or similar.
Practical experience working with SOC 2 Type II and/or ISO 27001.
Current knowledge of the evolving cybersecurity landscape and emerging threats, particularly AI-related.
Strong communication skills for technical and non-technical stakeholders.
Pragmatic, collaborative approach.
Experience building or scaling security capability within a high-growth or Series A/B technology business is valuable.
Technically strong, curious, and proactive.

Skills

Azure
Kubernetes
IAM
Zero-trust networking
Secrets management
RBAC
Pod security
Encryption
SAST
DAST
Dependency scanning
SCA
CI/CD
Infrastructure-as-code
Terraform
Helm
GitOps
Application security
API security
OAuth 2.0
JWT
mTLS
Secure coding practices
Vulnerability management
Incident response
Logging
Monitoring
Alerting
AI security
SOC 2 Type II
ISO 27001
GDPR
Data residency
Python
Go
Bash

Location

London

Work Type

Hybrid

Experience Level

Senior

Benefits

25 days annual leave + public holidays
Private healthcare with Vitality
Additional Christmas shutdown days
Biannual salary reviews
Summer & Christmas company events
Free Thursday lunch and after-work gatherings
Employee referral scheme
Cycle to Work scheme

About the Company

XYZ Reality has created the world’s first engineering-grade Augmented Reality solution for construction, The Atom, used on major projects worldwide.
The company is a Series B business scaling across the UK, US, and Europe.
Their technology stack spans Kubernetes on Azure, mobile and embedded AR, REST APIs, real-time collaboration, and AI-powered data pipelines.
They already hold SOC 2 Type II and ISO 27001 certifications.