Description
We're looking for a Senior Security Engineer who thinks about security end to end - not one domain deep, but the whole posture: application, infrastructure, supply chain, endpoints, operations, and the compliance surface behind them.
This is a Team Lead hire: we're looking for someone who will lead the DevSec team. You will start as a hands-on individual contributor to learn Glia's systems and security specifics, then step up to lead the team as a player-coach - leading the team's delivery and growth while remaining deeply hands-on, with career progression on the engineering IC track.
The Ramp-up (First 3 Months) You will start as a hands-on Senior Security Engineer to build a strong foundation. You will:
- Ship hands-on security work and learn Glia's platform, Glia-specific security challenges, and how the rest of the Platform group operates.
- Co-own the company security roadmap together with our Security Leader, balancing domains by risk.
- Get to know the team, our tooling, and Glia's project delivery methodologies.
The Team Lead Role (Post Ramp-up) Once you step up, your time will shift to ~60% leadership and ~40% hands-on work. You will own:
- Delivery & roadmap: own security programs end-to-end - from roadmap shaping and stakeholder alignment through implementation and adoption - prioritising by risk and unblocking the team.
- People & mentorship: run 1:1s, manage performance, and grow the team.
- Hands-on contribution: lead by example - stay close to the technical work and take on high-leverage security engineering yourself.
The Work: The role spans the whole security surface, prioritising by risk rather than by specialty:
- Application & product security - threat modelling, secure SDLC, design/code review, supply chain security
- Infrastructure & cloud security - AWS posture, runtime security, IAM; close collaboration with the Infrastructure team
- Security automation & AI - develop and own automation and AI tooling supporting company security goals; secure our AI-assisted development practices and LLM tooling
- Endpoint & corporate security - developer endpoint security (MDM, privilege, software governance), secrets hygiene
- Whole-posture assessment - run framework-based assessments (CIS Controls), identify where attention bears most value, and turn findings into prioritised, engineering-consumable plans
- Compliance interface - connect technical work to SOC 2 / PCI-DSS / ISO 42001 needs
- Mentor engineers, lead blameless post-mortems for security incidents, and present to and align senior management
Tech Stack You Will Be Working With:
- Infrastructure: AWS (Terraform, Kubernetes)
- CI/CD: Jenkins, GitHub Actions, ArgoCD
- Vulnerability detection & runtime security: Snyk, Sysdig/Falco
- SSO & MDM: Okta, Jamf
- Coding: Python preferred; our product stack includes Elixir, Ruby, and Golang
- AI-assisted development: Claude Code and agentic tooling are part of everyday engineering at Glia
Requirements:
- Credible hands-on experience in at least two security domains (e.g. AppSec + cloud/infra) and literacy across the rest - you think in overall posture and risk, not tools
- You have built or scaled a security program end-to-end (process, tooling, adoption), ideally in a low-structure environment
- Coding and automation ability (Python preferred) and cloud security depth (AWS)
- Experience with AI-assisted development, and with securing it: LLM tooling (e.g. MCP), AI governance awareness
- Leadership readiness with evidence - mentoring, deputising for a lead, or formal lead experience - and the commitment to step up as DevSec Team Lead after ramp-up, owning the team's delivery while staying technical
- An educator and multiplier, not a gatekeeper: you enjoy high-empathy collaboration with developers
- Located in Europe