Head Of Security Engineering & Operations (Cybersecurity)

TL;DR

Head Of Security Engineering & Operations (Cybersecurity): Leading and evolving security capabilities across Security Operations, Product Security, Cloud Security, and IAM with an accent on embedding secure-by-design principles into product and platform development. Focus on maturing detection and response, scaling identity lifecycle management, and championing the secure adoption of AI technologies.

Location: Hybrid: Must be based in London with a minimum 60% office attendance over a 12-week period

Salary: £115K – £135K + Equity + Bonus

Company

Europe’s number 1 downloaded rail app, enabling millions of travellers to find and book tickets across carriers and journey options in over 40 countries.

What you will do

• Define and execute the Security Engineering & Operations strategy aligned with business and technology goals.
• Lead and develop a multidisciplinary team across Security Operations, Product Security, Cloud Security, and IAM.
• Oversee and mature capabilities including detection and response, secure software development, and identity lifecycle management.
• Embed secure-by-design principles into product and platform development, partnering with engineering to balance risk and delivery speed.
• Champion the secure adoption of AI technologies and leverage AI to enhance operational efficiency and detection.
• Own security incident response and resilience, translating complex security topics into actionable insights for senior leadership.

Requirements

• Experience leading Security Engineering or Operations functions in fast-paced, product-led environments.
• Strong technical background across SecOps, product/application security, cloud security, and IAM.
• Experience working within engineering-led and DevOps-focused organisations.
• Proven track record of building and scaling high-performing teams.
• Familiarity with modern cloud environments (AWS, GCP) and microservices architectures.
• Experience applying or enabling AI within security contexts and understanding associated risks.

Nice to have

• Experience in high-scale consumer platforms.
• Knowledge of frameworks such as ISO 27001 or NIST.
• Background in automation and security tooling.

Culture & Benefits

• Private healthcare and dental insurance.
• Work from abroad policy (up to 28 days).
• 2-for-1 share purchase plans and an EV Scheme.
• Personal learning budgets, regular learning days, and clear career paths.
• Family-friendly benefits and extra festive time off.