{"id":84111,"url":"https://alion.io/job/xyz-reality-senior-security-compliance-engineer","title":"Senior Security & Compliance Engineer","company":{"id":4360,"name":"XYZ Reality","domain":"xyzreality.com","url":"https://alion.io/company/xyz-reality","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":81,"open_postings":12,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":45,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Legal","role_family":"Legal","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":88000,"max_usd":189000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":46},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"GitOps","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false}],"status":"live","first_seen_at":"2026-08-19T13:36:20Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-11-12T19:42:50Z","board_verified":true,"closed_at":null,"days_open":85,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":85},"description":"Lead the security of cutting-edge construction technology\nAt XYZ Reality, we've created the world's first engineering-grade Augmented Reality solution for construction. Our product, The Atom, is used on major projects worldwide to bring designs to life on-site and help teams build more accurately, efficiently and with fewer mistakes.\nAs a Series B business scaling across the UK, US and Europe, our technology, and the security environment supporting it, is becoming increasingly sophisticated. Our platform spans cloud-native services, mobile and embedded AR, APIs, real-time collaboration and AI-powered data pipelines..\nWe're looking for an experienced Senior Security & Compliance Engineer to lead technical security across XYZ Reality and help shape how our security capability scales with the business.\nThe Role\nThis is a senior, high-impact role with genuine ownership and influence across the business.\nYou'll sit within Engineering and work directly alongside the teams building our technology, taking part in architecture discussions, development workflows and technical decisions, rather than reviewing work after the fact.\nYou'll own security architecture across our technology, embed shift-left practices into how we build, lead cloud and application security, and keep us ahead of both established and emerging threats. As our use of AI develops, you'll help us understand and respond to AI-related risks and attack vectors.\nCompliance remains an important part of the role. You'll help keep our security certifications current and support GDPR, data residency and enterprise customer requirements. We're looking for strong hands-on security expertise first, alongside the governance knowledge to work across both.\nThe role is based in London on a hybrid basis, with 3 days per week in the office.\nWhat You’ll Be Doing\nOwn security architecture and technical security across XYZ Reality's technology.\n\nContinuously assess our security posture and drive pragmatic, prioritised improvements.\n\nLead cloud security across our infrastructure, including container platforms, databases and data pipelines.\n\nOwn core security domains across identity, access, networking and data protection.\n\nEmbed security testing and shift-left practices into engineering workflows and CI/CD.\n\nPartner with Engineering and Product on architecture, technical trade-offs and secure-by-design development.\n\nRun threat modelling and support secure coding practices across web, mobile and embedded codebases.\n\nOwn vulnerability management, including triage, risk prioritisation, remediation tracking and incident response.\n\nOwn and evolve security monitoring, detection and response.\n\nAssess emerging threats, including those tied to AI-enabled products and tooling.\n\nHelp keep our security certifications current.\n\nSupport compliance cycles, including controls testing, evidence gathering and auditor coordination.\n\nSupport GDPR and data residency requirements across our infrastructure and data.\n\nEngage with enterprise customers and prospects on our security posture.\n\nAutomate security controls and processes wherever possible.\n\nShape the standards, tooling and operating model for security as the business scales.\n\nWhat We’re Looking For\nDemonstrable in-depth hands-on technical security experience across application, cloud and/or infrastructure security.\n\nThe confidence to own security decisions end-to-end, not only in an advisory or governance capacity.\n\nStrong cloud security experience with at least one major provider (Azure, AWS or GCP).\n\nHands-on experience securing cloud-native and containerised environments.\n\nExperience integrating security testing into CI/CD pipelines.\n\nExperience securing infrastructure-as-code and GitOps workflows.\n\nUnderstanding of application and API security, including modern authentication standards and secure development practices.\n\nExperience identifying vulnerabilities, assessing technical risk and driving remediation.\n\nComfortable writing automation in Python, Go, Bash or similar.\n\nPractical experience with recognised security certification frameworks.\n\nCurrent knowledge of the threat landscape, particularly AI-related threats.\n\nStrong communication skills with technical and non-technical stakeholders.\n\nA pragmatic, collaborative approach: you know great security enables engineering teams.\n\nExperience leading or scaling security within a high-growth or Series A/B technology business would be particularly valuable.\nAbove all, we're looking for someone technically strong, curious and proactive, who engineers want to work with and who brings credibility to security conversations while staying pragmatic about how we build and ship.\nWhat You Could Be Working On\nCloud and container security architecture\n\nApplication and API security\n\nSecure software development and shift-left security\n\nVulnerability management and incident response\n\nAI-related security and emerging threats\n\nSecurity certification and compliance\n\nSecurity automation and CI/CD integration\n\nEnterprise customer security requirements\n\nXYZ Reality's longer-term security roadmap\n\nWhy Join Us\nLead technical security, with genuine ownership over how it develops at XYZ Reality\n\nHybrid working from our London office\n\n25 days annual leave + public holidays\n\nPrivate healthcare with Vitality\n\nAdditional Christmas shutdown days\n\nBiannual salary reviews\n\nSummer & Christmas company events\n\nFree Thursday lunch and after-work gatherings\n\nEmployee referral scheme\n\nCycle to Work scheme\n\nIf you're an experienced security engineer who wants to shape and lead security within a growing technology business, we'd love to hear from you.","description_format":"text","description_chars":5643,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Company events","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["AR & VR Software","Construction","Construction Management Software"],"lifecycle":[{"event":"open","at":"2026-08-19T13:36:20Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-11-12T09:37:45+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.369,"p_room":0.36,"age_days":84,"expected_fill_days":45,"reasons":["conf:3","stale_co","win:tail","crowd:"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/xyz-reality-senior-security-compliance-engineer","json_url":"https://alion.io/job/xyz-reality-senior-security-compliance-engineer.json","meta":{"generated_at":"2026-11-13T01:32:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3402,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4360},"rest":"https://alion.io/mcp/rest/get_company?id=4360"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxyz-reality-senior-security-compliance-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxyz-reality-senior-security-compliance-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxyz-reality-senior-security-compliance-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xyz-reality-senior-security-compliance-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxyz-reality-senior-security-compliance-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":84111}},{"tool":"search_jobs","arguments":{"company":"xyzreality.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":84111},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}