Security Lead, Noli
£70-80k
More information about location
3-4 days a week in office
AI-powered eCommerce platform that delivers personalised, science-backed product recommendations
Posted today
AI-powered eCommerce platform that delivers personalised, science-backed product recommendations
21-100 employees
Posted today
£70-80k
More information about location
3-4 days a week in office
21-100 employees
Company mission
To empower everyone to take control of their beauty journey with confidence and transparency.
Role
Who you are
- Proven experience as a Security Engineer or Security Lead in a cloud-native environment
- Strong knowledge of cloud-native security tools: IAM/RBAC, Defender, Sentinel, Key Vault
- Hands-on experience with secure SDLC, SAST/DAST, and DevSecOps workflows
- Strong understanding of identity and endpoint security (Entra ID, Intune, PAM)
- Experience overseeing SOC operations
- Ability to design simple, modern governance frameworks
- Strong communication and cross-functional collaboration skills
- Comfortable owning broad security areas in a fast-paced startup
What the job involves
- Noli is a fast-scaling Beauty Tech startup backed by L’Oréal. Launched in 2024, our mission is to help every user find the right beauty products through AI-driven personalisation. Based in Holborn, London, we are building a world-class engineering and data organisation where security is foundational to our growth
- Role Overview
- We are hiring our first in-house Security Lead to take ownership of an established security posture and drive its next phase internally. This is a high-impact, high-ownership role in a fast-paced environment
- Key Responsibilities
- Cloud Infrastructure Security (Azure)
- Define, maintain, and automate cloud security policies using IaC and compliance tooling
- Implement secure practices across secrets, identity, RBAC, networking, and data flows
- Ensure secure-by-default patterns for new systems (AI pipelines, APIs, data flows)
- Provide security guidance during architectural planning
- DevSecOps & Application Security
- Implement and manage SAST, DAST, and vulnerability scanning within CI/CD
- Embed remediation and mitigation processes into the SDLC, including SLAs
- Shape and evolve secure CI/CD patterns with Engineering
- Ensure adherence to secure coding best practices
- Threat Detection & SOC Oversight
- Lead the setup and management of the external SOC provider
- Define detection priorities, escalation paths, and response expectations
- Review incidents, run post-mortems, and improve monitoring
- Provide technical and business context to SOC analysts
- Incident Response & Resilience
- Own incident response playbooks and run simulations
- Partner with Engineering/Data on backup and recovery readiness
- Maintain business continuity considerations
- Endpoint & Identity Security
- Partner with IT to strengthen JML workflows and device policies
- Define and enforce CIS1-aligned device standards via MDM
- Maintain continuous identity and device compliance
- Governance, Policy & Compliance
- Develop modern, startup-friendly security policies
- Maintain a living risk register with quarterly reviews
- Support GDPR and privacy initiatives with Data teams
- Awareness & Culture
- Deliver quarterly security workshops and training
- Design security onboarding modules with HR
- Champion a company-wide security-first culture
Salary benchmarks
Our take
Noli is changing the way people find and buy beauty products. Backed by L’Oréal, it's the first AI-powered marketplace that acts like a personal beauty matchmaker. It uses smart tools and a ton of skin data to figure out what works best for customers' skin, then recommends the right products - no guesswork, just tailored picks.
It's a novel idea and already the platform features top brands like Aesop, Beauty of Joseon, CeraVe, COSRX, and of course, L’Oréal. And with powerful AI build alongside NVIDIA and Accenture, it's designed to keep learning, improving, and growing. So, with this solid foundation, Noli has the tools to become the next big thing in the beauty world and it'll certainly be one to watch.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Company HQ
City of London, London, UK
Leadership
Amos Susskind
(Co-Founder & CEO)Prior to Noli, Amos spent nearly 15 years at L'Oréal in various Product, Marketing, and Managerial roles.
Maëlle Gasc
(Co-Founder & Deputy CEO)Previously a Beauty Tech Entrepreneur at L'Oréal. Prior to that, they spent 7 years at Vestiaire Collective as Chief of Staff, VP of Supply, and Chief Growth Officer.
Share this job
View 1 more job at Noli