IT & Security Engineer

About UsMindgard is a London-based startup specializing in AI security. We help security teams test and find vulnerabilities within AI apps, models, and systems in less time. We’ve spun-out from a leading UK university, and our mission is to secure the future of AI against cyber attacks targeting AI. This is an unsolved challenge globally, and we are among the world’s first to offer a solution to this rapidly growing problem. The RoleWe are hiring a mid-level Security & IT Engineer to take full ownership of implementing our IT security controls and embedding them into how the company actually operates. This is a hands-on role. Your primary focus for the first 6 months will be turning our existing security policies into real, working systems and processes across engineering, product, and research. You will act as the bridge between compliance requirements and day-to-day execution - ensuring controls are not only in place, but practical, scalable, and aligned with how we build. Alongside this, you will own core IT operations, including device management, access control, and internal support, ensuring the company runs securely and efficiently.You will work closely with Operation leadership, Security leadership, and the Engineering team.What You Will Own1. SOC 2 Implementation (70–80%) - Primary FocusYou will be responsible for taking SOC 2 requirements and making them real inside the business.Translating SOC 2 policies into working technical controls across systems and workflowsImplementing and enforcing access controls across engineering tools and infrastructureSetting up logging, monitoring, and alerting in a way that aligns with how engineering operatesEmbedding security into development workflows without slowing teams downEnsuring all controls are properly configured, tested, and continuously monitoredMaintaining audit-ready evidence (logs, configurations, screenshots, system outputs)Ensuring our compliance platform accurately reflects reality at all timesEstablishing repeatable processes for access reviews, incident tracking, and risk managementActing as the primary owner of technical audit readiness2. Security Monitoring & Incident Response (10–15%)Monitor systems for security events and unusual activityInvestigate alerts and take first response actionsDefine clear processes for escalation and incident handlingMaintain simple, effective response playbooksRun occasional internal security tests or drills3. IT Operations & Access Management (10–15%)Own day-to-day internal security and IT operations, including:Managing employee devices and enforcing security standardsAdministering identity and access systems (onboarding, offboarding, permissions)Ensuring least-privilege access across all tools and systemsSupporting employees with technical issues and access requestsMaintaining secure configurations across laptops, tools, and internal systems4. Security Questionnaires & DocumentationOwn the security questionnaire process end-to-endBuild and maintain a central library of approved answersReduce dependency on leadership over timeEnsure all responses accurately reflect implemented controlsRequirementsWhat we are looking for3–6 years in a hands-on security, IT, or infrastructure roleProven experience implementing security controls (not just designing them)Strong understanding of identity and access management systems (Microsoft Entra etc.)Experience working closely with engineering teams and development workflowsComfortable setting up monitoring, logging, and alerting systemsExperience managing devices and internal IT systems in a growing companyFamiliarity with SOC 2 or similar frameworks (practical experience preferred)Able to balance security requirements with speed and usabilityStrong ownership mindset - you take things from idea to completionBenefitsCompetitive salary 33 days vacation Flexible working options Learning & development budget Company equity

Apply Now