Senior Security Engineer

Hi 👋 I’m Nitesh, Engineering Manager at hyperexponential. I'm one for the career mentors in the Product Foundations stream. We tackle the fundamental problems every product team at hx runs into, so the vertical streams can focus on building features for customers. Right now that means deployments, observability, security, AI observability tooling and a permission service that other value streams will build on.

I’m hiring a Senior Security Engineer to join us as our second security hire. The foundations are already in place. We’ve chosen and implemented our tooling, and our repositories and cloud environments are onboarded. The next step is shaping how security actually works here. This won’t be a traditional, hierarchical security function. Our engineers go straight to the person who owns an issue and ask them to fix it, and you’ll help define what security looks like in that model.

There’s no established playbook for this yet, which is what makes it exciting. If that sounds like your kind of challenge, I’d love to hear from you.

About hyperexponential (hx)

At hyperexponential, we're building the AI-powered platform that enables the world's most critical decisions in a £7 trillion industry, which risks to take, and how to price them. These are the decisions that shape real-world outcomes: whether rockets successfully launch into space, autonomous vehicles make it to market, or communities recover after major storms.

Until now, insurance has been making billion-pound decisions using outdated tools. We're changing that. Our platform brings together data, AI, and human expertise to give insurers the fastest path from submission to decision - helping them move faster, act smarter, and take on more risk with confidence.

Backed by a16z, Highland Europe, and Battery Ventures, we're scaling globally - already trusted by nearly 50 of the world's largest insurers, with zero churn and billions in premiums flowing through hx.

What began as a single product in one market has rapidly evolved into a multi-product, multi-territory platform powering every stage of pricing and underwriting. AI is at the core of what we do - from building the world's first domain-specific AI peer programmer for insurance (think GitHub Copilot with a PhD in actuarial science) to shaping agentic workflows that reinvent how this industry operates.

What makes hx different is the people who build it. Here, impact isn't tied to title or tenure; it's defined by the challenges you take on and the discipline you bring. Surrounded by peers who stretch you, you'll do the best, hardest work of your life in a company engineered to endure.

If that sounds like you, join us in building what comes next.

About the Security function

The Security function's mission is to safeguard the integrity, confidentiality, and availability of our customers' data and hx's systems. By fostering a culture of vigilance, risk mitigation, and continuous improvement, we maintain the highest standards of security excellence.

Security at hx underpins every product and every customer interaction. As we scale our multi-product platform globally and adopt AI across the business, the team ensures that innovation and growth are matched with rigorous security practices. We design controls, shape culture, and guide decisions that protect our business, our customers, and the wider industry.

As a Senior Security Engineer, you’ll be the second engineer in our security team, working directly alongside our Staff Security Engineer. The foundations are in place, with our core tooling chosen, rolled out and onboarded across our repositories and cloud environments. Much of how security works at hx is still to be built, though, so you’ll have real autonomy to shape it, with a direct line to the teams who own the issues you find. You’ll strengthen hx’s security posture by driving continuous improvement across our technical teams: owning security reviews, running and extending our security tooling, and turning findings into fixes, often by writing the code or making the infrastructure change yourself. You’ll champion security initiatives across the organisation, help teams adopt AI securely, and use AI to multiply your own impact. This role combines hands-on technical depth, ownership and influence to make security a practical part of how our teams work every day.

Check out our Engineering Candidate Hub for a behind the scenes look at the team you would be joining!

What you'll be doing

Modify, maintain, and extend our security tooling across engineering and IT environments, including CSPM, SAST, SCA, and secret scanning, ensuring it's reliable, well tuned, and genuinely useful to the teams who depend on it.

Use our tooling and your own judgement to proactively identify gaps across cloud security, dependencies, secrets, and code. Work with the owning teams (starting with 2 to 3 where the gaps are greatest) to secure their commitment to prioritise remediation, and see it through.

Write code and make infrastructure changes yourself to fix security issues and improve our tooling, rather than just recommending improvements.

Own security reviews end to end, partnering with engineering teams on new designs, significant changes, and new tools, and working through follow-up questions and challenges until each review is resolved.

Take ownership of and complete a medium-sized security project within your first three months.

Partner with our IT team on security best practice, helping implement practical improvements in authentication, authorisation, and security hygiene across our corporate environment.

Guide teams across the business on adopting AI securely, from assessing new AI tools and use cases to mitigating risks like data leakage and prompt injection, while using AI yourself to increase your impact.

Support our compliance programmes, such as ISO 27001 and SOC 2, by helping teams implement and evidence technical controls.

Act as a trusted voice for our technical teams, owning security issues raised with them through to resolution and handling the related correspondence.

What you'll need to have done

Secured AWS cloud environments hands-on: using Cloud Security tooling to find common weaknesses, and fixing them yourself through infrastructure and code changes. Cloud Security experience is required.

Secured containerised workloads and infrastructure-as-code, catching issues before they reach production.

Experience working with SAST, SCA, and secret scanning tools, including triaging findings, filtering out false positives, and partnering with engineering teams to get real fixes shipped

Supported compliance efforts such as ISO 27001, SOC 2, or GDPR by implementing and evidencing technical controls.

Used AI to improve your own security work and helped others adopt it safely, with a practical understanding of AI-specific risks such as data leakage, prompt injection, and agents and integrations with excessive permissions.

Spotted and addressed non-technical risks, such as weak processes, risky behaviours, and gaps between teams, that can undermine technical security.

Discussed security in depth with engineering teams, explaining complex concepts clearly and concisely and influencing teams through to implementation.

Taken ownership of security projects and initiatives and driven them to completion independently.

You're unlikely to thrive here if

You prefer to advise from the sidelines rather than writing code and making the infrastructure changes yourself.

You see security as a gatekeeping function rather than a service to the teams you support, whose adoption and trust determine your success.

You'd rather wait for direction than take ownership of issues, follow them through to resolution, and manage the correspondence around them.

If reading our Culture Document leaves you feeling neutral rather than energised, hx may not be the place where you'll do your best work. We're bu