Staff Security Engineer (London)
About hyperexponential (hx)
At hyperexponential, we’re building the AI-powered platform that enables the world’s most critical decisions in a $7 trillion industry, which risks to take, and how to price them. These are the decisions that shape real-world outcomes: whether rockets successfully launch into space, autonomous vehicles make it to market, or communities recover after major storms.
Until now, insurance has been making billion-dollar decisions using outdated tools. We’re changing that. Our platform brings together data, AI, and human expertise to give insurers the fastest path from submission to decision - helping them move faster, act smarter, and take on more risk with confidence.
Backed by a16z, Highland Europe, and Battery Ventures, we’re scaling globally - already trusted by nearly 50 of the world’s largest insurers, with zero churn and billions in premiums flowing through hx.
What began as a single product in one market has rapidly evolved into a multi-product, multi-territory platform powering every stage of pricing and underwriting. AI is at the core of what we do - from building the world’s first domain-specific AI peer programmer for insurance (think GitHub Copilot with a PhD in actuarial science) to shaping agentic workflows that reinvent how this industry operates.
What makes hx different is the people who build it. Here, impact isn’t tied to title or tenure; it’s defined by the challenges you take on and the discipline you bring. Surrounded by peers who stretch you, you’ll do the best, hardest work of your life in a company engineered to endure.
If that sounds like you, join us in building what comes next.
About the Security function
The Security function's mission is to safeguard the integrity, confidentiality, and availability of our customers’ data and hx Renew’s systems. By fostering a culture of vigilance, risk mitigation, and continuous improvement, we maintain the highest standards of security excellence.
Security at hx underpins every product and every customer interaction. As we scale our multi-product platform globally, the team ensures that innovation and growth are matched with rigorous security practices. We design controls, shape culture, and guide decisions that protect our business, our customers, and the wider industry.
As a Staff Security Engineer, you’ll play a pivotal role in building hx’s security function from the ground up. You’ll drive technical direction, design systems that are secure by design, and collaborate across engineering and product teams to embed security early in every decision. This role combines technical depth, influence, and cross-functional leadership to make security an enabler of growth and a differentiator for hx in the market.
What you’ll be doing
Build hx's security programme from the ground up, setting direction for security architecture, compliance, and incident response as we scale globally.
Design and implement security controls across AWS cloud infrastructure, Kubernetes workloads, and our multi-product platform, ensuring systems are secure by design.
Integrate security into engineering workflows by embedding automated security testing, vulnerability management, and threat detection into CI/CD pipelines without slowing teams down.
Lead or contribute to compliance initiatives (SOC2, ISO27001) by implementing technical controls and working cross-functionally with legal, engineering, and business teams to enable enterprise sales.
Build security automation and tooling by writing code and scripts that scale security practices, detect vulnerabilities, and enforce policies efficiently.
Partner with Engineering Managers, Principal Engineers, and Product Managers to embed security thinking early in design and architecture decisions.
Act as a trusted voice in critical moments: responding to incidents, unblocking teams on security questions, and keeping high-stakes initiatives secure and on track.
Assess and secure AI-powered systems across hx's platform, implementing controls that enable safe adoption of AI while mitigating risks like prompt injection, data leakage, and model vulnerabilities.
What you’ll need to have done
Built or significantly contributed to security programmes from the ground up, establishing foundational security controls, compliance readiness, and incident response capabilities.
Designed and implemented security architecture for cloud-based distributed systems (AWS or equivalent), including multi-account strategies, identity and access management, network security, and data protection.
Driven technical security improvements by writing code, building tools, and implementing controls that scaled with company growth.
Integrated security into development workflows through DevSecOps practices including automated testing, secrets management, container security, and infrastructure-as-code security.
Led or supported compliance initiatives (SOC2, ISO27001, GDPR, or similar), mapping technical controls to compliance requirements and guiding teams through audit cycles.
Built trust with engineering teams by contributing technically and making security collaborative and frictionless.
Balanced security rigor with business goals, making risk-based trade-offs that enabled growth while protecting customers and the business.
Evaluated security implications of AI/ML systems, including understanding AI-specific risks and implementing controls to secure them.
You’re unlikely to thrive here if
You prefer narrow ownership of security tools over building cross-functional culture and influence.
You view security as primarily compliance-driven rather than enabling business outcomes and customer trust.
You lead through authority and mandates rather than influence, collaboration, and making engineers’ lives easier.
You’re more comfortable writing policies than writing code, or can’t dive deep into complex systems to implement security controls.
If reading our Culture Document leaves you feeling neutral rather than energised, hx may not be the place where you’ll do your best work. We’re building something that asks for commitment and conviction, and we want you to feel excited by the opportunity to grow with us.
Compensation
At hx, we’re committed to salary transparency. You’ll always have clarity on pay early in the process - our Talent Partner will share details with you during initial conversations - and we’re working towards publishing salary information for all roles globally.
Because we’re building at the intersection of technology/SaaS and insurance, our roles don’t always map neatly onto traditional benchmarks. Our approach is to design compensation that’s competitive in the market, fair across teams, and aligned with the impact our people make.
Equity: We offer equity across all roles at hx, making it a significant component of total compensation. Your talent partner will be able to share more details about this.
Benefits
£5,000 training and conference budget for individual and group development.
25 days of holiday plus 8 bank holidays (33 days total).
Company pension scheme via Penfold.
Mental health support and therapy via Spectrum.life.
Individual wellbeing allowance via Juno.
Private healthcare insurance through AXA.
Income protection and Life Insurance.
Cycle to Work Scheme
Additional perks
Top-spec equipment (laptop, screens, adjustable desks, etc.).
Regular remote and in-person hackathons, lunch and learns, socials, and game nights.
Team breakfasts and lunches, snacks, drinks fridge, and a fun office at The Ministry.
Exceptional opportunities for personal development and growth as we build something remarkable together.
Interview process
Initial call with Talent team (45 minutes)
Manager Interview (60 minutes)
Technical Assessment (e.g., code review, system design) (120 minutes)
Meet the VP of Engineering (60 minutes)
Values Interview with Tech Leadership (60 minutes)
Offer
Our commitment to Diversity
hxer's are at the centre of everything we build. We know that progress depends on diverse perspectives, and we are committed to creating an environment where everyone can thrive, grow, and make an impact. We recognise there is always more to do, and we take responsibility for shaping a workplace that is not only diverse but genuinely inclusive.
Diversity is not just the right thing to do, it is key to solving the complex challenges we choose to take on. By welcoming people from all backgrounds and experiences, we strengthen our ability to question assumptions, push boundaries, and design solutions that endure.
If you’re energised by complexity and motivated to grow, we encourage you to apply and join our global team.
Next steps
If this opportunity resonates with you, we encourage you to apply or share it with your connections! Our dedicated talent team reviews all applications, and we promise to provide feedback regardless of the outcome.
For more information about applying and to view other opportunities, you can visit our careers page.
Please note that background checks will be conducted as part of the hiring process to ensure compliance with our governance policies. We handle all background checks sensitively and in full compliance with relevant regulations. All applicant data will be processed in accordance with data protection regulations and our privacy policy.