Senior Security Engineer

About Lendable

Lendable is on a mission to build the world's best technology to help people get credit and save money. We're building one of the world’s leading fintech companies and are off to a strong start:

• One of the UK’s newest unicorns with a team of just over 700 people

• Among the fastest-growing tech companies in the UK

• Profitable since 2017

• Backed by top investors including Balderton Capital and Goldman Sachs

• Loved by customers with the best reviews in the market (4.9 across 10,000s of reviews on Trustpilot)

So far, we’ve rebuilt the Big Three consumer finance products from scratch: loans, credit cards and car finance. We get money into our customers’ hands in minutes instead of days.

We’re growing fast, and there’s a lot more to do: we’re going after the two biggest Western markets (UK and US) where trillions worth of financial products are held by big banks with dated systems and painful processes.

Join us if you want to

1. Take ownership across a broad remit. You are trusted to make decisions that drive a material impact on the direction and success of Lendable from day 1

2. Work in small teams of exceptional people, who are relentlessly resourceful to solve problems and find smarter solutions than the status quo

3. Build the best technology in-house, using new data sources, machine learning and AI to make machines do the heavy lifting

About the Role

At Lendable, we don’t do box-ticking security. We’re building automated guardrails and high-leverage tooling integrations to keep our business moving fast and safely. We are looking for a practical, execution-focused Security Engineer to manage the configuration, integration, and engineering lifecycle of our internal security tools.

This is a highly versatile engineering role for someone who loves to solve security problems with code and automation. You will act as the engineering engine room for the InfoSec team - collaborating closely with our SecOps, AppSec, Architecture, Security GRC and IT Systems leads to translate security requirements into working configurations, automated pipelines, and custom data integrations.

Whether it's writing Terraform to roll out a new edge security rule, stitching together SaaS APIs via Python to pull data into a centralised reporting app, or jumping into a web UI for some quick "click-ops" configuration, your focus is entirely on efficiency, posture improvement, and eliminating manual toil.

What You’ll Be Doing

• Configuration as Code: Drive security configurations across our stack utilising a Terraform and GitOps workflow.

• Tooling Optimisation: Get the most out of our InfoSec tooling through proactive setup, tuning, and configuration, ensuring we maximise our defensive utility and continuously improve our security posture.

• Platform Integrations: Build and maintain high-leverage integrations between cloud providers, SaaS platforms, and our core security tooling - for example, engineering log pipelines into our SIEM or automating evidence feeds into our compliance platform.

• Automation Engineering: Architect and deploy agentic workflows and lean automation scripts to eliminate manual toil, driving productivity and scalability for the InfoSec team.

• Frictionless Control Implementation: Design and deploy practical guardrails, CASB, and data loss prevention (DLP) policies across network boundaries and collaboration tools – for example, Google Workspace. Your focus is on safeguarding data and enabling safe tooling usage without creating engineering bottlenecks.

What We’re Looking For

• Practical Engineering Capabilities: Solid hands-on experience using Python (or similar) to automate tasks, Terraform to manage infrastructure, connect APIs, and manage infrastructure state, balanced with the judgement to use UI configurations when code isn't viable.

• Cloud & Infrastructure Literacy: Proven experience configuring or hardening security controls within cloud (AWS/GCP) environments (e.g. IAM and network/identity boundaries) and handling data formats like JSON to parse logs.

• AI-First Execution: Enthusiastic about actively leveraging advanced AI coding tools (such as Claude Code, Codex) to exponentially increase your engineering output, script generation, and delivery speed.

• Pragmatic Security Mindset: A builder who views security as a business enabler. You focus on building practical defensive posture rather than filling out compliance checklists, with the instinct to identify actual systemic risk based on context.

• Bias for Action: An execution-focused operator. When a security control drifts or a peer needs a detection mechanism, you write the script, open the PR, or modify the control to get it done.

• Communication & Collaboration: The ability to debate technical IAM architecture details with a Platform Engineer and seamlessly explain to non-technical risk stakeholders why a specific control change matters.
  

Interview Process

1. TA Screening Call

2. Hiring Manager Call

3. Technical Interview

4. Culture Interview

Life at Lendable

• Winning team: the opportunity to scale up one of the world’s most successful fintech companies

• Flexible working: flexible approach tailored to each role. Hybrid roles require three days in-office weekly; fully remote roles include regular opportunities for in-person connection through socials and off-sites

• Socials & connection: opportunities and events to come together, socialise, and get to know each other beyond the office walls

• Health coverage: support for your physical and mental wellbeing, including private health cover

• The market for this role in London

  TalentyGo lists 9138 similar roles (23 in London), 19% remote. Charlie ranks them against your CV, each with a clear score.

  Similar roles

  9138

  Remote

  19%

  New / 7d

  271