Security Engineer

Who we are

At GetGround, our mission is to make property investment safer, faster and more accessible for everyone.

We’ve built an all-in-one property investment platform that supports investors from opportunity analysis and company formation through to financing, accounting and portfolio management. By bringing software, data and specialist services into one experience, we make property investing simpler, clearer and more cost-effective.

More than 30,000 investors across 70 countries trust us with their identity documents, company records, bank details and the financial picture of their portfolios. Several of our products are regulated by the FCA, and we’re now serving institutional clients and expanding into new markets.

Our security needs to grow faster than we do. We’re looking for someone to own it.

The opportunity

You’ll be GetGround’s first dedicated security engineer. This is a hands-on role with broad ownership. You’ll decide how we prevent, detect and respond to threats across our cloud, devices, identity and SaaS estate, and then build it.

The scope goes beyond configuring tools. You’ll run our SIEM and own our alerts, keep us ahead of a threat landscape that AI is changing fast, and make sure leadership knows where we stand and what we need.

You’ll work closely with our site reliability engineer, product engineers, our Compliance team and our Data Protection Officer. Over time, you’ll be able to shape how security works across GetGround, including the standards, processes and future hires we need.

What you’ll do

• Own our security posture. You’ll be the person accountable for security at GetGround. Assess where we are today and define a roadmap that balances security with what the business needs. Be pragmatic: understand our stage, what risk we can accept for now and what has to be fixed today. Keep leadership informed about our risks, what you need and how we’ll address them.

• Stay ahead of threats. The threat landscape is moving faster than ever, and AI is driving much of that change. AI-generated phishing, deepfake social engineering, prompt injection and data leaking through AI tools are all part of it. Track what’s emerging, judge what matters to a regulated fintech and act before it reaches us.

• Run our SIEM and own our alerts. Make sure logs from GCP, identity, endpoints, SaaS tools and our own platform reach the SIEM and stay there. Write detection rules, map coverage against MITRE ATT&CK,