Security Engineer

📋 Job Overview

At Datatonic, we are Google Cloud's premier partner in AI, driving transformation for world-class businesses. We push the boundaries of technology with expertise in machine learning, data engineering, and analytics on Google Cloud. By partnering with us, clients future-proof their operations, unlock actionable insights, and stay ahead of the curve in a rapidly evolving world.

🏢 About Datatonic

We are looking for a hands-on Security Engineer to strengthen our security operations and take ownership of key risks and controls. This is the first dedicated security hire in the team and will play a central role in improving monitoring, detection, data protection, and automation across the organisation. This is an internal role focused on securing our own IT systems and infrastructure.

🎯 The Role

You will combine technical security engineering with practical compliance ownership, ensuring that our ISO 27001 and UK Cyber Essentials controls are not just documented, but effective and measurable. As our first dedicated security engineer, you will help shape how security operates day to day. The scope is broad by design, but success in this role is not about doing everything at once. It is about understanding risk, making sound technical judgments, and prioritising the work that meaningfully reduces risk for the business.

✅ Key Responsibilities

• Improve and tune SIEM detection rules and alerting workflows
• Identify gaps in detection coverage and develop pragmatic detection improvements based on evolving risks and changes in our environment
• Enhance DLP and secure web gateway controls
• Monitor and remediate findings from CASB and ISPM platforms
• Investigate security alerts and incidents, including root cause analysis
• Support vulnerability management across cloud, endpoints, and SaaS platforms, including prioritisation and remediation tracking
• Maintain and improve incident response procedures, including playbooks, tabletop exercises, and post-incident reviews
• Provide security input into internal enterprise technology decisions, including new SaaS integrations and cloud architecture changes
• Automate repetitive security workflows and reporting
• Reduce false positives and continuously improve signal quality

📌 Required Qualifications

• 5–7 years of hands-on experience in information security
• Practical experience operating and tuning security tools such as ISPM, SIEM, DLP, CASB, EDR, and related platforms
• Solid understanding and real-world implementation experience of Zero Trust principles, including identity-based access controls, least privilege, device posture enforcement, and continuous verification
• Experience in incident response and security investigations
• Strong understanding of cloud logging, telemetry pipelines, and log source integration
• Strong technical mindset with automation experience (Python, Bash, or similar scripting languages) to streamline security operations and reduce manual effort
• Experience supporting ISO 27001 or similar compliance frameworks, including control ownership and audit readiness
• Comfortable taking ownership of security controls, identifying gaps, and driving measurable improvements independently
• Full professional fluency in English, with the ability to communicate clearly with technical and non-technical stakeholders

⭐ Desirable Experience

• Experience in cloud environments, especially Google Cloud
• Experience with Infrastructure as Code such as Terraform or Pulumi
• Experience preparing for or supporting ISO audits
• Relevant certifications (CompTIA Security+, Google Professional Cloud Security Engineer, or similar)

🎁 Benefits

• 27 days of vacation
• Supplementary and additional health insurance
• 50% covered MultiSport membership
• Hybrid working model for flexibility and balance