The impact you will have:

As the Technical Information Security Officer, you’ll be a key member of Elliptic’s security team and hold responsibility for the secure configuration, deployment, and ongoing management of our security tooling across employee endpoints and AWS cloud infrastructure. Your technical contributions will directly support the protection of our technology assets and customers, as well as the integrity of our core services and platforms.

You will drive continuous improvement in threat detection and incident response, ensuring security events are quickly identified and appropriately managed. Whether it’s tuning logs and alerts, enhancing endpoint protections, or analysing anomalies, your oversight will give us greater visibility and resilience in the face of evolving threats. You’ll work across a varied toolkit of SIEM, EDR, DLP, PAM, log aggregation, and vulnerability management platforms to ensure we are protected from cyber risks.

Beyond reactive measures, you’ll also play a proactive role by championing secure development practices across the engineering organisation and hardening our security posture through the continual development and improvement of security controls. You’ll guide the integration of secure software development lifecycle (SSDLC) practices, empowering product and engineering teams to identify and eliminate vulnerabilities early on. Through threat modelling, secure coding guidance, tool integration (e.g., DAST, SAST, composition analysis), and review processes, you’ll help us build security into every stage of delivery.

This role is not just about technical expertise—it’s also about tangible, strategic impact. Your efforts will directly influence the safeguards protecting our business and customers. You'll be joining at an exciting time in Elliptic’s journey and will help shape its future as we continue to grow and innovate globally.

What we expect from you

Security Champion - We expect you to champion a culture of security through strong collaboration, communication, and problem-solving. You’ll work closely with colleagues from a range of disciplines, translating complex technical risks into clear, actionable advice that aligns with business priorities.

Technical risk and engagement - You’ll be responsible for embedding security into decision-making processes across the organisation. This means actively engaging with product and platform teams to understand their context, helping them implement appropriate controls, and ensuring risks are understood and remediated in a timely, practical manner.

Communicator - We expect you to be capable of influencing and advising teams, whether that’s explaining the severity of a cloud misconfiguration, supporting incident response, or guiding teams through the remediation of vulnerabilities. You'll be confident in presenting risk findings to both technical and non-technical audiences, adapting your approach to the needs of different stakeholders.

Technical compliance and audit - You’ll play a vital role in supporting Elliptic’s compliance efforts. This includes contributing to policy development, supporting internal audits, completing risk assessments, and assisting with due diligence for third-party vendor engagements. You’ll develop automation for technical compliance checks and ensure that technical security controls are documented, reviewable, and evidence-backed helping to demonstrate the maturity of our cyber security programme and its alignment with regulatory requirements and industry best practices.

You are someone who:

You’re both technically competent and highly pragmatic—just as comfortable designing a security monitoring architecture as you are investigating a suspicious alert or recommending secure AWS configurations to an engineer. You approach challenges collaboratively and with a sense of ownership, knowing that the best solutions are both secure and usable.

You thrive in a fast-moving scale-up environment, and you understand the importance of balancing security and agility. You understand how to gain buy-in from stakeholders across different disciplines.

With a deep passion for cybersecurity, you stay current with emerging threats, adversary tactics, and industry tooling. Curious by nature and data-driven in your decision making. Whether it's identifying gaps in monitoring coverage or streamlining processes to manage vulnerabilities more effectively, you're driven by a desire for improvement and operational excellence.

You must have:

> How we work:

> Learning & Development:

> Vacation/ Leave:

> Benefits: