Head of Security Engineering

• We’re looking for a Head of Security Engineering to lead and evolve a critical function within our growing Information Security team
• This is a highly influential leadership role, responsible for shaping the future of security engineering at Our Future Health, while also getting hands on implementing the technical changes
• As Head of Security Engineering, you’ll lead a team of security engineers and specialist contractors, overseeing the technologies, platforms, automation, and services that enable and underpin security across the security team and the wider organisation
• Engineering is at the heart of this role and therefore across our security engineering activities you’ll drive the adoption of engineering best practices, champion an “everything-as-code” approach, enable self-service capabilities where appropriate, and ensure our security solutions are scalable, resilient, and integrated seamlessly into our cloud-native environment
• This role combines strategic leadership with hands-on technical expertise
• You’ll play a key role in defining the future direction of security engineering and then implementing your ideas alongside our security engineers
• You’ll also oversee the operation and availability of many of our critical security services and technologies, ensuring they remain reliable, secure, and fit for purpose
• Alongside the technical challenge, this role requires exceptional people leadership. You’ll develop and mentor a growing team, creating an environment where engineers can do their best work, manage and prioritise a backlog of security engineering work, and support the security team culture and practice of continuous improvement, driven by our highly dynamic security risk management approach and Cyber Threat Intelligence (CTI)
• Working closely with the Director of Information Security, Head of Cyber Defence and Head of Product Security, you’ll play a key role in equipping our security teams with the technical solutions, tools and automation they need to deliver critical services and capabilities
• Your work will directly support our mission of improving health outcomes for millions of people
• Deputising for the Director of Information Security and helping shape security strategy
• Leading, coaching, and developing the Security Engineering team
• Managing team priorities, delivery, and day-to-day operations
• Driving continuous improvement across processes, tooling, and documentation
• Embedding engineering best practices, including automation, CI/CD, and Infrastructure as Code
• Championing an “everything-as-code” approach across security services
• Remaining hands-on with security engineering, automation, and solution design
• Overseeing the reliability and effectiveness of core security technologies
• Building integrations between security tools, platforms, and workflows
• Expanding automation and self-service security capabilities
• Partnering with Security Operations, Product Security, Architecture, and Risk teams
• Using threat intelligence, risk insights, and metrics to drive improvement
• Defining and tracking service performance metrics and KPIs
• Advising on emerging technologies, security trends, and investment priorities
• Maintaining technical documentation and security platform standards
• Supporting technology teams to adopt and integrate security services
• Contributing to wider security initiatives, including ISO 27001 compliance

Benefits

• 30 days annual leave plus bank holidays.
• Generous company pension package with employer contributions of up to 12%
• We have a lovely new office in Holborn, Central London and we offer flexible and remote working arrangements.
• We offer all employees a life assurance policy.
• Training support to help you achieve your potential.
• All employees are covered by a group income protection scheme to support them in the event of long term sickness.

• If you’re looking for a new challenge where you can contribute to helping future generations live in good health for longer, then we’re keen to speak with you
• Proven hands-on security engineering background
• Knowledge of CI/CD, secure software development, and modern engineering practices
• An understanding of IAM, cloud security, vulnerability management, and defensive controls
• Experience leading and developing high-performing security engineering teams
• Passion for coaching, mentoring, and developing others
• Excellent automation and engineering-first mindset
• Security architecture and secure-by-design expertise
• Terraform and Infrastructure as Code tooling
• Building self-service security capabilities
• Experience working in Agile, product-led environments
• Expertise securing cloud-native environments, ideally Azure
• Ability to balance strategic leadership with technical delivery
• Experience in highly regulated environments
• Experience with Infrastructure as Code and policy-as-code approaches
• Microsoft Defender, Sentinel, Entra, and Purview experience
• Experience building and operating security platforms and tooling
• Knowledge of ISO 27001 and security governance frameworks
• Excellent communication and stakeholder management skills
• Relevant certifications such as CISSP, CCSP, GIAC, or Azure Security Engineer
• Experience using risk, intelligence, and operational metrics to prioritise improvements