SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: GBP 120,000 - 150,000 / annual
Attio is an AI-native CRM platform for revenue teams, backed by $116M in funding from top-tier investors including Google Ventures and Redpoint. The company is building a secure, multi-tenant SaaS platform that handles sensitive customer data while leveraging AI-driven product features.
As Security Engineering Lead, you will build and lead Attio's Product Security function from the ground up, spanning application security and security operations. This is a leadership role with significant scope: you'll define security strategy, recruit and manage a team of Security Engineers and SecOps practitioners, and work as a peer with Engineering Leadership to embed security into the product development lifecycle.
Key responsibilities include:
- Building a scalable Product Security program for a large-scale, multi-tenant SaaS platform
- Partnering with Engineering Leadership to ensure security-by-design principles
- Identifying and mitigating unique risks associated with AI-driven features and AI-assisted development
- Leading production security incident response, from detection through root-cause analysis to remediation
- Recruiting, mentoring, and retaining a world-class security team
- Establishing secure software development and operational practices at scale
You should bring deep expertise in application security within high-scale SaaS environments, strong incident response skills across the full lifecycle, and proven ability to build and lead high-performing teams. Experience running an AppSec program in a similar context, managing security engineers, and managing security certifications is highly valued. A background in software engineering or systems administration is a plus.
Attio offers competitive compensation (£120,000–£150,000), equity, 25 days holiday plus local public holidays, Apple hardware, private medical insurance, pension contributions, enhanced family leave, and regular team off-sites.
