Security and Compliance Engineer

About this role

Datatonic, a Google Cloud AI partner, seeks an experienced Security and Compliance Engineer to establish and mature their internal security operations. As the first dedicated security hire, you'll own detection engineering, compliance controls (ISO 27001, UK Cyber Essentials), incident response, and security automation across a cloud-first infrastructure of 300 employees.

What you'll do

• Improve SIEM detection rules, alerting workflows, and reduce false positives
• Enhance DLP, secure web gateway, CASB, and ISPM controls with gap identification
• Investigate security alerts and incidents with root cause analysis
• Support vulnerability management across cloud, endpoints, and SaaS platforms
• Own and maintain compliance controls, audit evidence, and control gap remediation
• Automate security workflows and build lightweight compliance automation

What they're looking for

• SIEM operation and tuning
• DLP and secure web gateway management
• CASB and ISPM platform experience
• Zero Trust architecture implementation
• Scripting and security automation
• ISO 27001 and UK Cyber Essentials compliance
• Incident response and threat investigation
• Cloud security (Google Cloud, SaaS platforms)