• Modify, maintain, and extend our security tooling across engineering and IT environments, including CSPM, SAST, SCA, and secret scanning, ensuring it's reliable, well tuned, and genuinely useful to the teams who depend on it.
• Use our tooling and your own judgement to proactively identify gaps across cloud security, dependencies, secrets, and code. Work with the owning teams (starting with 2 to 3 where the gaps are greatest) to secure their commitment to prioritise remediation, and see it through.
• Write code and make infrastructure changes yourself to fix security issues and improve our tooling, rather than just recommending improvements.
• Own security reviews end to end, partnering with engineering teams on new designs, significant changes, and new tools, and working through follow-up questions and challenges until each review is resolved.
• Take ownership of and complete a medium-sized security project within your first three months.
• Partner with our IT team on security best practice, helping implement practical improvements in authentication, authorisation, and security hygiene across our corporate environment.
• Guide teams across the business on adopting AI securely, from assessing new AI tools and use cases to mitigating risks like data leakage and prompt injection, while using AI yourself to increase your impact.
• Support our compliance programmes, such as ISO 27001 and SOC 2, by helping teams implement and evidence technical controls.
• Act as a trusted voice for our technical teams, owning security issues raised with them through to resolution and handling the related correspondence.

What you'll need to have done

• Secured AWS cloud environments hands-on: using Cloud Security tooling to find common weaknesses, and fixing them yourself through infrastructure and code changes. Cloud Security experience is required.
• Secured containerised workloads and infrastructure-as-code, catching issues before they reach production.
• Experience working with SAST, SCA, and secret scanning tools, including triaging findings, filtering out false positives, and partnering with engineering teams to get real fixes shipped
• Supported compliance efforts such as ISO 27001, SOC 2, or GDPR by implementing and evidencing technical controls.
• Used AI to improve your own security work and helped others adopt it safely, with a practical understanding of AI-specific risks such as data leakage, prompt injection, and agents and integrations with excessive permissions.
• Spotted and addressed non-technical risks, such as weak processes, risky behaviours, and gaps between teams, that can undermine technical security.
• Discussed security in depth with engineering teams, explaining complex concepts clearly and concisely and influencing teams through to implementation.
• Taken ownership of security projects and initiatives and driven them to completion independently.

You're unlikely to thrive here if

• You prefer to advise from the sidelines rather than writing code and making the infrastructure changes yourself.
• You see security as a gatekeeping function rather than a service to the teams you support, whose adoption and trust determine your success.
• You'd rather wait for direction than take ownership of issues, follow them through to resolution, and manage the correspondence around them.

If reading our Culture Document leaves you feeling neutral rather than energised, hx may not be the place where you'll do your best work. We're building something that asks for commitment and conviction, and we want you to feel excited by the opportunity to grow with us.

Compensation

At hx, we're committed to salary transparency. You'll always have clarity on pay early in the process - our Talent Partner will share details with you during initial conversations - and we're working towards publishing salary information for all roles globally.

Because we're building at the intersection of technology/SaaS and insurance, our roles don't always map neatly onto traditional benchmarks. Our approach is to design compensation that's competitive in the market, fair across teams, and aligned with the impact our people make.

Equity: We offer equity across all roles at hx, making it a significant component of total compensation. Your Talent Partner will be able to share more details about this.

• £5,000 training and conference budget for individual and group development.
• 25 days of holiday plus 8 bank holidays (33 days total).
• Company pension scheme via Penfold.
• Mental health support and therapy via Spectrum.life .
• Individual wellbeing allowance via Juno.
• Private healthcare insurance through AXA.
• Income protection and Life Insurance.
• Cycle to Work Scheme.

Additional perks

• Top-spec equipment (laptop, screens, adjustable desks, etc.).
• Regular remote and in-person hackathons, lunch and learns, socials, and game nights.
• Team breakfasts and lunches, snacks, drinks fridge, and a fun office at The Ministry.
• Exceptional opportunities for personal development and growth as we build something remarkable together.

Interview process

• Talent Interview (30 minutes)
• Hiring Manager Interview (60 minutes)
• Skills Assessment (120 minutes)
• Values Interview (60 minutes)
• Meet the CEO (30 minutes)