Security Engineer

About Applied Computing

Applied Computing was founded in 2024 to build Orbital, a physics-informed foundation model for energy operations. We’re live across oil and gas, refineries, and petrochemicals, working towards our mission: sustainable abundance for a growing planet.

The hydrocarbon industry keeps the world running. But its complexity has left operators tied to legacy systems, making critical decisions on less than 10% of available data.

We built Orbital to change that. It’s a foundation model built specifically for energy that lets companies use AI at scale, harnessing all of their operational data and optimising in real time for any metric. Decisions get faster, operations get safer, and carbon intensity falls.

We’ve raised over $32 million, including one of the largest seed rounds for an AI company in the UK. We’re just getting started.

Security here is not a compliance function with a budget and a slide deck. We take compliance seriously and it is woven into how the team operates. It is an engineering problem that needs solving every day, by someone who gets stuck in.

Our security team is small and honest about it. A hands‑on CISO, a Compliance Manager, a Lead Security Researcher who spends his time on the offensive side, and a junior engineer who was the IT lead six months ago and is now doing the best work of their career. We need someone to sit in the middle of that and pull it forward.

The work is real and the ambition is high. We are maturing our Dev Sec Ops  capability, driving continuous improvement across our cloud posture, and targeting SOC 2 Type 2 certification within three to six months. Nobody is going to hand you a roadmap. You will help build it.

If that sounds like the kind of problem you want to own, read on.

• Design and implement security gates within CI/CD pipelines using Git Hub Actions and related tooling
• Define and enforce secure coding standards and automated checks across development workflows
• Work closely with engineering teams to embed security early in the development lifecycle without becoming a blocker
• Champion a shift‑left security culture across the organisation

• Own and maintain the cloud security posture across AWS (primary), Azure (development), and M365
• Use Wiz to continuously monitor, prioritise, and remediate cloud security findings
• Develop and enforce cloud security standards, IAM policies, and guardrails
• Identify and close gaps in cloud architecture before they become incidents

• Lead the vulnerability management programme, triage, prioritise, track and remediate across the estate
• Manage the intake of security findings from internal and external sources and ensure nothing falls through the cracks
• Produce clear, actionable remediation guidance for engineering and infrastructure teams and where needed, roll up your sleeves and raise the PR yourself
• Track and report on risk reduction over time to the CISO

• Provide day‑to‑day mentoring and technical guidance to the junior security engineer
• Review their work, share your thinking, and help them develop both technically and professionally
• Contribute to a team culture where curiosity is valued and problems are solved collaboratively

• Hands‑on experience with Terraform for infrastructure as code and security configuration management
• Proficiency with Microsoft Sentinel – building detections, managing alerts, and investigating incidents
• Working knowledge of Wiz or a comparable cloud security posture management tool
• Strong understanding of Dev Sec Ops  principles and practical experience integrating security into Git Hub‑based CI/CD pipelines
• Solid AWS security experience – IAM, security groups, logging, monitoring, and remediation
• Familiarity with M365 and Azure security configurations
• Experience delivering against SOC 2 and/or ISO 27001 requirements in a hands‑on engineering capacity
• Proven ability to manage and prioritise a vulnerability backlog under real‑world constraint

The technical skills matter. So does everything else. We need someone who does not wait to be told…