Principal Security Engineer, MrQ

• 6+ years in security engineering, enterprise security or security operations with demonstrated impact building or significantly maturing a security function
• Deep hands-on experience deploying, configuring, managing and troubleshooting enterprise security
• Tools — EDR/XDR, SASE/SWG, SIEM, DLP, email security, endpoint privilege management, MDM
• Expert-level knowledge of identity and access management SSO, SAML, OAuth, SCIM, conditional access, MFA, passwordless with proven zero trust implementation in production
• Led incident response investigations end to end — built playbooks, managed containment and drove remediation across real-world security incidents
• Strong scripting and automation capability (Python, Bash, PowerShell) applied to detection engineering, security operations and compliance automation
• Direct experience building security governance — writing policies, implementing controls, preparing for and leading audit engagements (ISO 27001, SOC 2, Cyber Essentials, GDPR)
• Fluent in security frameworks and threat methodologies (MITRE ATT&CK, NIST CSF, CIS Controls, OWASP) with practical application, not just theoretical knowledge
• Experience securing cloud-native and SaaS-heavy environments (AWS preferred)
• Strategic thinker who can define a roadmap, influence stakeholders and make security decisions that balance risk with business enablement

Desirable

• This is a founding security engineering role
• There is no existing function, no inherited tooling, no playbooks to follow while you're building it
• We need someone who can own the entire security engineering discipline end to end: define the strategy, architect the solutions, deploy and manage the tooling, write the policies, run the operations, and report on posture to the business
• You’ll work as a direct partner to the IT Ops Specialist
• The two of you will shape how security and IT operations work together across the organisation
• This means you need to be technically exceptional while also being the person who builds the governance, drives compliance, and ensures security has a seat at every strategic decision
• You will own the security roadmap, influence technology and platform choices, and be accountable for the security posture of the business
• This is not a support role, it’s a senior position that demands both engineering depth and strategic ownership