9 months ago
London, United KingdomStaff+
Responsibilities
- Own existing security tooling and implement, configure, maintain, and scale new tools including endpoint protection, MDM, and access controls.
- Embed secure-by-design practices into the development lifecycle through secure coding, threat modelling, design reviews, and CI/CD hardening.
- Monitor systems for irregular behaviour and design detection and prevention mechanisms.
- Align infrastructure and applications with industry standards including OWASP Top 10 and the AWS Well-Architected Framework.
- Conduct and lead third-party, vendor, and internal security risk assessments.
- Document and maintain security policies, procedures, and controls for the ISO 27001-certified ISMS.
- Partner with go-to-market teams and leadership to demonstrate security posture and compliance maturity to customers and prospects.
Requirements
- Hands-on experience deploying and managing security tooling such as EDR, MDM, ZTNA, and vulnerability scanners.
- Experience working within AWS’s security ecosystem and navigating enterprise security tools across vendors.
- Strong foundations in networking, systems, and cloud infrastructure, with the ability to apply OWASP and AWS Well-Architected practices.
- Experience reviewing and improving product and infrastructure security, including threat modelling, secure code review, and CI/CD hardening.
- Familiarity with ISO 27001 or SOC 2 and the ability to translate technical controls into documented policies and audit-ready evidence.
- Ability to automate repetitive security tasks using Python, PowerShell, Bash, or APIs.
- Proactive, generalist approach to risk reduction across infrastructure, product, and compliance domains.
- Comfort with autonomy, ambiguity, rapid execution, and end-to-end ownership.
Benefits
- Competitive salary and significant equity
- Huge autonomy and ownership over core security systems
- Budget for learning and professional growth
- Bi-annual team retreats
- Opportunity to work closely with experienced founders and a team of AI scientists and engineers
About Pear VC
Pear VC is an early-stage venture capital partnership that invests at pre-seed and seed, pairing capital with hands-on support, mentorship, and programs like its PearX accelerator for founding teams. Founded in 2013 and headquartered in Menlo Park, California, it backs software and technology startups across categories. Its portfolio includes companies that reached the public markets, such as DoorDash and Guardant Health.