Staff Detection and Response Engineer Job at Heidi (Sydney)

Staff Security Engineer

At hyperexponential, we’re building the AI-powered platform that enables the wor...

Location

United Kingdom , London

Salary:

Not provided

hyperexponential

Expiration Date

Until further notice

Requirements

Built or significantly contributed to security programmes from the ground up, establishing foundational security controls, compliance readiness, and incident response capabilities
Designed and implemented security architecture for cloud-based distributed systems (AWS or equivalent), including multi-account strategies, identity and access management, network security, and data protection
Driven technical security improvements by writing code, building tools, and implementing controls that scaled with company growth
Integrated security into development workflows through DevSecOps practices including automated testing, secrets management, container security, and infrastructure-as-code security
Led or supported compliance initiatives (SOC2, ISO27001, GDPR, or similar), mapping technical controls to compliance requirements and guiding teams through audit cycles
Built trust with engineering teams by contributing technically and making security collaborative and frictionless
Balanced security rigor with business goals, making risk-based trade-offs that enabled growth while protecting customers and the business
Evaluated security implications of AI/ML systems, including understanding AI-specific risks and implementing controls to secure them

Job Responsibility

Build hx's security programme from the ground up, setting direction for security architecture, compliance, and incident response as we scale globally
Design and implement security controls across AWS cloud infrastructure, Kubernetes workloads, and our multi-product platform, ensuring systems are secure by design
Integrate security into engineering workflows by embedding automated security testing, vulnerability management, and threat detection into CI/CD pipelines without slowing teams down
Lead or contribute to compliance initiatives (SOC2, ISO27001) by implementing technical controls and working cross-functionally with legal, engineering, and business teams to enable enterprise sales
Build security automation and tooling by writing code and scripts that scale security practices, detect vulnerabilities, and enforce policies efficiently
Partner with Engineering Managers, Principal Engineers, and Product Managers to embed security thinking early in design and architecture decisions
Act as a trusted voice in critical moments: responding to incidents, unblocking teams on security questions, and keeping high-stakes initiatives secure and on track
Assess and secure AI-powered systems across hx's platform, implementing controls that enable safe adoption of AI while mitigating risks like prompt injection, data leakage, and model vulnerabilities

What we offer

£5,000 training and conference budget for individual and group development
25 days of holiday plus 8 bank holidays (33 days total)
Company pension scheme via Penfold
Mental health support and therapy via Spectrum.life
Individual wellbeing allowance via Juno
Private healthcare insurance through AXA
Income protection and Life Insurance
Cycle to Work Scheme
Top-spec equipment (laptop, screens, adjustable desks, etc.)
Regular remote and in-person hackathons, lunch and learns, socials, and game nights

Fulltime

Staff Cloud Security Engineer

We're making the world of digital assets accessible and secure for everyone. Joi...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

5+ years of experience in DevSecOps & automation, security assessment, and cloud-native environments
8+ years of experience on information security
Proficiency working in Unix/Linux environments, Git, Python, Terraform, Kubernetes, AWS cloud solutions and architectures, CI/CD tools, configuration management, etc.
Hands-on experience with security tooling deployment, monitoring, and incident response
Proven track record of cross-functional work, with the ability to collaborate effectively with various teams and stakeholders
Excellent presentation and written communication skills
Ability to work autonomously, deal with ambiguity, and handle high-pressure situations

Job Responsibility

Building and driving the cybersecurity transformation by integrating secure development practices, ensuring application security via automated scanning, and collaborating closely with the Infrastructure, Engineering, and The product security (Donjon) teams
Collaborate with the Infrastructure, the engineering and the Donjon teams to integrate security into the delivery plans, ensure early detection and mitigation of security vulnerabilities
Work closely with the Donjon, the product Security team responsible, to provide automation and tooling for product security evaluation integration in CI/CD pipeline
Engage in proactive security practices, including penetration testing, vulnerability assessments, and Infrastructure Security (IaC) code reviews to ensure Ledger's platforms and applications are secure
Participate in the design and implementation of security architectures, from the design to the risk assessment
Act as the primary point of contact for any security incidents, ensuring rapid response, mitigation, and post-incident analysis
Drive the adoption of DevSecOps culture, best practices, and methodologies across the organization, ensuring continuous security improvement

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets, including Apple products
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products

Fulltime

Staff Cloud Security Engineer

We're making the world of digital assets accessible and secure for everyone. Joi...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

5+ years of experience in DevSecOps & automation, security assessment, and cloud-native environments
8+ years of experience on information security
Proficiency working in Unix/Linux environments, Git, Python, Terraform, Kubernetes, AWS cloud solutions and architectures, CI/CD tools, configuration management, etc.
Hands-on experience with security tooling deployment, monitoring, and incident response
Proven track record of cross-functional work, with the ability to collaborate effectively with various teams and stakeholders
Excellent presentation and written communication skills
Ability to work autonomously, deal with ambiguity, and handle high-pressure situations.

Job Responsibility

Collaborate with the Infrastructure, the engineering and the Donjon teams to integrate security into the delivery plans, ensure early detection and mitigation of security vulnerabilities
Work closely with the Donjon, the product Security team responsible, to provide automation and tooling for product security evaluation integration in CI/CD pipeline.
Engage in proactive security practices, including penetration testing, vulnerability assessments, and Infrastructure Security (IaC) code reviews to ensure Ledger's platforms and applications are secure.
Participate in the design and implementation of security architectures, from the design to the risk assessment.
Act as the primary point of contact for any security incidents, ensuring rapid response, mitigation, and post-incident analysis.
Drive the adoption of DevSecOps culture, best practices, and methodologies across the organization, ensuring continuous security improvement.

What we offer

Equity
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets, including Apple products
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products.

Fulltime

Staff Cloud Security Engineer

We're making the world of digital assets accessible and secure for everyone. Joi...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

5+ years of experience in DevSecOps & automation, security assessment, and cloud-native environments
8+ years of experience on information security
Proficiency working in Unix/Linux environments, Git, Python, Terraform, Kubernetes, AWS cloud solutions and architectures, CI/CD tools, configuration management, etc.
Hands-on experience with security tooling deployment, monitoring, and incident response
Proven track record of cross-functional work, with the ability to collaborate effectively with various teams and stakeholders
Excellent presentation and written communication skills
Ability to work autonomously, deal with ambiguity, and handle high-pressure situations.

Job Responsibility

Collaborate with the Infrastructure, the engineering and the Donjon teams to integrate security into the delivery plans, ensure early detection and mitigation of security vulnerabilities
Work closely with the Donjon, the product Security team responsible, to provide automation and tooling for product security evaluation integration in CI/CD pipeline
Engage in proactive security practices, including penetration testing, vulnerability assessments, and Infrastructure Security (IaC) code reviews to ensure Ledger's platforms and applications are secure
Participate in the design and implementation of security architectures, from the design to the risk assessment
Act as the primary point of contact for any security incidents, ensuring rapid response, mitigation, and post-incident analysis
Drive the adoption of DevSecOps culture, best practices, and methodologies across the organization, ensuring continuous security improvement.

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets, including Apple products
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products.

Fulltime