security engineer for SaaS security

Pencil develops a SaaS product that uses Generative AI to create advertising content and make marketing more effective and effortless. Its mission is to make AI the default in advertising while supporting creative people, small businesses, and individuals.

• Administer and secure endpoints using MDM/Intune, patching, encryption, and device compliance, while supporting practical desktop and device issues;
• Own day-to-day identity and access management, including joiner/mover/leaver processes, least-privilege access, and quarterly access reviews across Google Workspace, Microsoft 365, GCP, and other SaaS tools;
• Monitor security alerts and logs, escalate promptly, and help investigate and document security events such as suspicious logins, compromised credentials, device loss, and cloud misconfiguration;
• Support compliance evidence collection in Vanta for SOC 2, ISO 27001, and ISO 42001 alongside the Head of Security & Trust;
• Gather evidence for vendor and customer security questionnaires and flag issues requiring escalation;
• Identify and implement practical improvements to monitoring, alerting, and access control across cloud and endpoint tooling.

• Background in desktop support, IT systems administration, or a similar technical operations role, with a move into or experience in blended IT/security work;
• Hands-on experience with endpoint management using Intune or similar MDM;
• Experience administering Google Workspace or Microsoft 365;
• Comfortable with cloud basics, including GCP, AWS, or Azure IAM;
• Security certification such as CompTIA Security+, ISC2 Certified in Cybersecurity, or Microsoft SC-900, or clear evidence of self-directed learning;
• Helpful and practical approach, including willingness to switch between security work and laptop support;
• Enjoys hands-on work across strategic security and practical IT problems;
• Takes ownership of problems end-to-end and works proactively;
• Can explain technical issues simply to non-technical colleagues;
• Nice to have: Exposure to compliance or audit evidence gathering using Vanta or similar.

• 25 Days PTO plus public holidays under a Flexible Time Off scheme;
• Health insurance / private medical cover;
• Monthly stipend towards wellness, fitness, and learning and development;
• Enhanced parental leave policies for birth, adoption, or surrogacy;
• Flexible working hours.