SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
hyperexponential is an AI-powered insurance platform trusted by nearly 50 of the world's largest insurers, backed by a16z, Highland Europe, and Battery Ventures. The company is building technology that enables critical decisions in a £7 trillion industry, combining data, AI, and human expertise to help insurers move faster and take on more risk with confidence.
You'll join as the second Security Engineer in a newly-formed security function within the Product Foundations stream. The foundations are already in place—core tooling has been chosen, implemented, and onboarded across repositories and cloud environments. Your role is to shape how security actually works at hyperexponential, moving away from traditional hierarchical gatekeeping toward a collaborative model where engineers work directly with security to fix issues.
Key responsibilities include:
- Modify, maintain, and extend security tooling (CSPM, SAST, SCA, secret scanning) to ensure reliability and usefulness to engineering teams
- Proactively identify security gaps across cloud, dependencies, secrets, and code; work with owning teams to prioritize and complete remediation
- Write code and make infrastructure changes yourself to fix security issues and improve tooling
- Own security reviews end-to-end, partnering with engineering teams on new designs and significant changes
- Complete a medium-sized security project within your first three months
- Partner with IT on security best practices in authentication, authorization, and corporate security hygiene
- Guide teams on adopting AI securely, assessing new tools and mitigating risks like data leakage and prompt injection
- Support compliance programs (ISO 27001, SOC 2) by implementing and evidencing technical controls
- Act as a trusted voice for technical teams, owning security issues through to resolution
This role combines hands-on technical depth with ownership and influence. You'll work directly alongside the Staff Security Engineer and have a direct line to teams who own the issues you find. Security at hyperexponential underpins every product and customer interaction, and as the company scales its multi-product platform globally and adopts AI across the business, the security team ensures innovation is matched with rigorous practices.
REQUIREMENTS:
- Hands-on experience securing AWS cloud environments: using Cloud Security tooling to find common weaknesses and fixing them through infrastructure and code changes (required)
- Experience securing containerized workloads and infrastructure-as-code
- Working knowledge of SAST, SCA, and secret scanning tools, including triaging findings and partnering with engineering teams on fixes
- Experience supporting compliance efforts such as ISO 27001, SOC 2, or GDPR by implementing and evidencing technical controls
- Practical experience using AI to improve security work and helping others adopt it safely, with understanding of AI-specific risks (data leakage, prompt injection, agents with excessive permissions)
- Ability to spot and address non-technical risks such as weak processes, risky behaviors, and gaps between teams
- Strong communication skills: ability to discuss security in depth with engineering teams, explain complex concepts clearly, and influence teams through to implementation
- Track record of taking ownership of security projects and driving them to completion independently
The role is not suitable if you prefer advising from the sidelines rather than writing code, view security as gatekeeping rather than service, or need significant direction rather than taking autonomous ownership.
