{"id":462441,"url":"https://alion.io/job/pencil-security-engineer-emea-remote","title":"Security Engineer - EMEA - Remote","company":{"id":178078,"name":"Pencil","domain":"trypencil.com","url":"https://alion.io/company/pencil-2","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["DE","FR","AE","GB","AT","BE","BA","BG","HR","CY","CZ","DK","FI","HU","IE","IL","IT","KE","ME","NL","NG","NO","PL","RO","SA","RS","ZA","ES","SE","CH","TR","UA","AL","DZ","AD","AO","BH","BJ","BW","BF"],"hiring_countries_total":116,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Least Privilege","optional":false},{"name":"SOC 2","optional":false},{"name":"Digital Twin","optional":true},{"name":"Recommender Systems","optional":true}],"status":"live","first_seen_at":"2026-08-21T12:48:46Z","employer_posted_date":"2026-08-21","last_verified_at":"2026-10-25T09:15:37Z","board_verified":true,"closed_at":null,"days_open":65,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":65},"description":"Job Description\nAt Pencil, we are driving innovation in advertising technology through our state-of-the-art SaaS product, which harnesses Generative AI to redefine content creation. Our mission is to make AI the default in advertising without replacing creative people. To achieve this, we need to make sure that our technology isn’t just in the hands of big brands - we need to try to help small businesses and creative individuals too.\nWe're looking for a Security & Trust Specialist to join Pencil at a pivotal moment of growth. This is a hands-on, technical role for someone with a background in desktop support, IT systems administration or a similar technical operations role who is now building a career in security. You'll own the day-to-day security operations that keep Pencil safe - endpoints, identity and access, cloud and SaaS security - and you're happy to lend a hand with practical IT and device issues where needed. You'll work directly with our Head of Security & Trust, who will support your growth into the audit, compliance and vendor-risk side of the role over time.\nKey responsibilities:\nAdminister and secure endpoints (MDM/Intune, patching, encryption, device compliance), and be willing to pitch in on practical desktop support and device issues when the team needs a hand.\n\nOwn day-to-day identity and access management - joiner/mover/leaver processes, least-privilege access and quarterly access reviews across Google Workspace, Microsoft 365, GCP and other SaaS tools.\n\nMonitor security alerts and logs, escalate promptly, and help investigate and document security events (suspicious logins, compromised credentials, device loss, cloud misconfiguration).\n\nSupport compliance evidence collection in Vanta for SOC 2, ISO 27001 and ISO 42001, working alongside the Head of Security & Trust rather than owning audit strategy yourself.\n\nHelp gather evidence for vendor and customer security questionnaires, and flag anything that needs escalating.\n\nIdentify and implement practical improvements to monitoring, alerting and access control across cloud and endpoint tooling.\n\nYour background:\nA background in desktop support, IT systems administration or a similar technical operations role, now moving into (or already doing blended IT/security) work.\n\nHands-on experience with endpoint management (Intune or similar MDM) and Google Workspace or Microsoft 365 administration.\n\nComfortable with cloud basics (GCP, AWS or Azure IAM) - you don't need deep cloud engineering experience, but you're curious and capable of learning fast.\n\nSome exposure to compliance or audit evidence gathering (Vanta or similar) is a bonus, not required.\n\nA security certification such as CompTIA Security+, ISC2 Certified in Cybersecurity or Microsoft SC-900 - or clear evidence of self-directed learning if you don't have one yet.\n\nA genuinely helpful, practical approach - you don't mind switching between security work and helping a colleague with their laptop.\n\nYou’ll Thrive Here If You…\nYou enjoy being hands-on and don't mind switching between strategic security work and practical, in-the-moment IT problems (Human).\n\nYou're hungry to grow a career in security and want to learn from the audits and questionnaires you'll be exposed to (Owners).\n\nYou take ownership of problems end-to-end and don't wait to be told what to do (Owners).\n\nYou can explain technical issues simply to non-technical colleagues (Simple).\n\nKPIs & Success Measures\nAccess reviews and joiner/mover/leaver tasks completed within SLA, with zero access-control audit findings.\n\nEndpoint compliance rate (encryption, patching, MDM enrolment) across the device fleet.\n\nTime-to-close on security incidents and IT/device issues you support.\n\nQuality and completeness of evidence you contribute to Vanta and vendor reviews.\n\nBenefits:\n25 days PTO plus public holidays, although we operate a Flexible Time Off scheme\n\nHealth insurance / private medical cover\n\nMonthly stipend towards wellness, fitness, and learning and development\n\nRemote - work from anywhere in your home country\n\nEnhanced parental leave policies, whether you become a parent through birth, adoption or surrogacy\n\nAccess to our Pencil office in The Shard, London for UK employees\n\nFlexible working hours\n\nDeep Dive About Pencil\nPencil uses AI to make ads. Our mission is to make marketing effective and effortless. We want to become the default way ads get made - because AI ads are 10x faster and cheaper to make, and 2x better performing, than making them without AI.\nWe’re called Pencil because we believe AI will be a tool for creative people, not a replacement - it may even be as fundamental a tool in the future as the pencil was in the past.\nPencil was founded in 2018 with a team from Google, Facebook and Uber with backing from Sequoia and Entrepreneur First. We were acquired by The Brandtech Group in 2023 to pursue a shared vision of bringing GenAI to the Fortune 500.\nhttps://www.trypencil.com\nAbout The Brandtech Group\nThe Brandtech Group’s mission is to be the best company in the world at helping leading global brands drive growth by connecting content, data and media using technology.\nIt was founded in June 2015 (as You & Mr Jones) by former Havas Global CEO David Jones, with a simple mission to help brands do their marketing better, faster and cheaper using technology. It was renamed The Brandtech Group in January 2022.\nToday it generates more than $1BN in revenue and is the largest global digital content partner for many of the world's biggest brands and companies, often using its unique in-housing model. It works with eight of the world's top 10 global advertisers and 49 of the world's top 100. Clients include Banco Itaú, Danone, Google, Intuit, LVMH, Microsoft, Morgan-Stanley, Netflix, Reckitt, Renault-Nissan, PayPal, TikTok, Uber and Unilever.\nIn addition, the Group invests in cutting-edge technology companies relevant to and with potential in marketing and has been investing in the AI, AR and the metaverse space since 2015. The Group was the first external investor in Niantic (creators of Pokémon Go), alongside investments in AI Foundation (AI digital twins, personalized AI, and deep-fake detection 2018), Automat (AI chatbots, 2016), Elsy (AI media planning, 2016), Jivox (dynamic automated content,, 2016), Crossing Minds (deep learning AI recommendation system, 2017), CreativeX (AI-driven content optimization, 2022), Zappar (AR, 2017), Provenance (blockchain, 2022) and GGP (the world's largest gaming fund).\nThe Group is one of the most prominent marketing industry voices on the prediction and movement to AI-driven marketing, including Generative AI. It was named one of the World's Most Innovative Companies 2021 by Fast Company, and by CB Insights as one of the World's Most Valuable Private Unicorns.\nhttps://www.thebrandtechgroup.com","description_format":"text","description_chars":6837,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Flexible time off","Health insurance","Parental leave"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"region"},{"name":"France","iso":"FR","kind":"region"},{"name":"United Arab Emirates","iso":"AE","kind":"region"},{"name":"United Kingdom","iso":"GB","kind":"region"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Bosnia and Herzegovina","iso":"BA","kind":"region"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Cyprus","iso":"CY","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"region"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Israel","iso":"IL","kind":"region"},{"name":"Italy","iso":"IT","kind":"region"},{"name":"Kenya","iso":"KE","kind":"region"},{"name":"Montenegro","iso":"ME","kind":"region"},{"name":"Netherlands","iso":"NL","kind":"region"},{"name":"Nigeria","iso":"NG","kind":"region"},{"name":"Norway","iso":"NO","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"region"},{"name":"Saudi Arabia","iso":"SA","kind":"region"},{"name":"Serbia","iso":"RS","kind":"region"},{"name":"South Africa","iso":"ZA","kind":"region"},{"name":"Spain","iso":"ES","kind":"region"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Switzerland","iso":"CH","kind":"region"},{"name":"Turkey","iso":"TR","kind":"region"},{"name":"Ukraine","iso":"UA","kind":"region"},{"name":"Albania","iso":"AL","kind":"region"},{"name":"Algeria","iso":"DZ","kind":"region"},{"name":"Andorra","iso":"AD","kind":"region"},{"name":"Angola","iso":"AO","kind":"region"},{"name":"Bahrain","iso":"BH","kind":"region"},{"name":"Benin","iso":"BJ","kind":"region"},{"name":"Botswana","iso":"BW","kind":"region"},{"name":"Burkina Faso","iso":"BF","kind":"region"},{"name":"Burundi","iso":"BI","kind":"region"},{"name":"Cameroon","iso":"CM","kind":"region"},{"name":"Cape Verde","iso":"CV","kind":"region"},{"name":"Chad","iso":"TD","kind":"region"},{"name":"Central African Republic","iso":"CF","kind":"region"},{"name":"Comoros","iso":"KM","kind":"region"},{"name":"Democratic Republic of the Congo","iso":"CD","kind":"region"},{"name":"Djibouti","iso":"DJ","kind":"region"},{"name":"Equatorial Guinea","iso":"GQ","kind":"region"},{"name":"Eritrea","iso":"ER","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Eswatini","iso":"SZ","kind":"region"},{"name":"Ethiopia","iso":"ET","kind":"region"},{"name":"Faroe Islands","iso":"FO","kind":"region"},{"name":"Gabon","iso":"GA","kind":"region"},{"name":"Gambia","iso":"GM","kind":"region"},{"name":"Georgia","iso":"GE","kind":"region"},{"name":"Ghana","iso":"GH","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Guinea","iso":"GN","kind":"region"},{"name":"Guinea-Bissau","iso":"GW","kind":"region"},{"name":"Iceland","iso":"IS","kind":"region"},{"name":"Iraq","iso":"IQ","kind":"region"},{"name":"Isle of Man","iso":"IM","kind":"region"},{"name":"Ivory Coast","iso":"CI","kind":"region"},{"name":"Jordan","iso":"JO","kind":"region"},{"name":"Kosovo","iso":"XK","kind":"region"},{"name":"Kuwait","iso":"KW","kind":"region"},{"name":"Latvia","iso":"LV","kind":"region"},{"name":"Lebanon","iso":"LB","kind":"region"},{"name":"Lesotho","iso":"LS","kind":"region"},{"name":"Liberia","iso":"LR","kind":"region"},{"name":"Liechtenstein","iso":"LI","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Madagascar","iso":"MG","kind":"region"},{"name":"Malawi","iso":"MW","kind":"region"},{"name":"Mali","iso":"ML","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Mauritania","iso":"MR","kind":"region"},{"name":"Mauritius","iso":"MU","kind":"region"},{"name":"Mayotte","iso":"YT","kind":"region"},{"name":"Moldova","iso":"MD","kind":"region"},{"name":"Monaco","iso":"MC","kind":"region"},{"name":"Morocco","iso":"MA","kind":"region"},{"name":"Mozambique","iso":"MZ","kind":"region"},{"name":"Namibia","iso":"NA","kind":"region"},{"name":"Niger","iso":"NE","kind":"region"},{"name":"North Macedonia","iso":"MK","kind":"region"},{"name":"Oman","iso":"OM","kind":"region"},{"name":"Palestine","iso":"PS","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Qatar","iso":"QA","kind":"region"},{"name":"Republic of the Congo","iso":"CG","kind":"region"},{"name":"Réunion","iso":"RE","kind":"region"},{"name":"Rwanda","iso":"RW","kind":"region"},{"name":"Saint Helena and Ascension","iso":"SH","kind":"region"},{"name":"San Marino","iso":"SM","kind":"region"},{"name":"São Tomé and Príncipe","iso":"ST","kind":"region"},{"name":"Senegal","iso":"SN","kind":"region"},{"name":"Seychelles","iso":"SC","kind":"region"},{"name":"Sierra Leone","iso":"SL","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"},{"name":"Somalia","iso":"SO","kind":"region"},{"name":"South Sudan","iso":"SS","kind":"region"},{"name":"Svalbard","iso":"SJ","kind":"region"},{"name":"Tanzania","iso":"TZ","kind":"region"},{"name":"Togo","iso":"TG","kind":"region"},{"name":"Tunisia","iso":"TN","kind":"region"},{"name":"Uganda","iso":"UG","kind":"region"},{"name":"Western Sahara","iso":"EH","kind":"region"},{"name":"Zambia","iso":"ZM","kind":"region"},{"name":"Zimbabwe","iso":"ZW","kind":"region"},{"name":"Gibraltar","iso":"GI","kind":"region"},{"name":"Vatican","iso":"VA","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Advertising","Generative Image","Marketing & Sales AI"],"lifecycle":[{"event":"open","at":"2026-09-06T11:27:07Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.286,"p_room":0.36,"age_days":64,"expected_fill_days":36,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/pencil-security-engineer-emea-remote","json_url":"https://alion.io/job/pencil-security-engineer-emea-remote.json","meta":{"generated_at":"2026-10-25T13:04:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18492,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":178078},"rest":"https://alion.io/mcp/rest/get_company?id=178078"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpencil-security-engineer-emea-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpencil-security-engineer-emea-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpencil-security-engineer-emea-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pencil-security-engineer-emea-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpencil-security-engineer-emea-remote"}]}