Lead Security Engineer

About the role

Lead Security Engineer at CNTXT, a high‑growth technology scale‑up, responsible for establishing and executing the company’s security strategy across applications, cloud infrastructure and endpoints. This hands‑on role combines strategic planning with day‑to‑day implementation, from writing policies to running penetration tests.

Key responsibilities

• Define and drive the security roadmap, risk register and governance policies aligned with business priorities.
• Secure the software development lifecycle: threat modelling, secure code reviews, SAST/DAST, dependency and supply‑chain scanning.
• Hardening of cloud environments (GCP, AWS, Azure) including network segmentation, workload identity, WAF and infrastructure‑as‑code guardrails.
• Implement DDoS protection, edge security, container and Kubernetes hardening, image scanning and runtime protection.
• Design and enforce identity and access management, SSO, MFA, least‑privilege roles and secrets management (Vault, cloud KMS).
• Deploy endpoint protection (EDR/XDR), device management and disk encryption for corporate devices.
• Own vulnerability management lifecycle, conduct internal and external penetration tests and coordinate red‑team engagements.
• Build and maintain incident response, forensics, backup, disaster recovery and business continuity processes.

Required profile

• Proven experience in building security programmes in fast‑growing technology organisations.
• Hands‑on expertise across application, cloud and infrastructure security.
• Ability to work independently, influence engineering teams and communicate with senior leadership.

Required skills

• Terraform
• GCP, AWS, Azure
• SAST / DAST tools
• CI/CD pipelines
• Kubernetes and container security
• WAF / CDN security
• SIEM / SOAR
• Identity & Access Management (IAM, SSO, MFA)
• HashiCorp Vault or cloud KMS
• EDR / XDR solutions
• Vulnerability scanning and penetration testing
• Incident response and forensics