security engineer for SaaS advertising technology

Pencil develops a SaaS advertising technology product that uses Generative AI to improve content creation and make advertising more effective and accessible to brands, small businesses, and creative individuals.

• Administer and secure endpoints using MDM/Intune, patching, encryption, and device compliance, while supporting practical desktop and device issues;
• Own day-to-day identity and access management, including joiner/mover/leaver processes, least-privilege access, and quarterly access reviews across Google Workspace, Microsoft 365, GCP, and other SaaS tools;
• Monitor security alerts and logs, escalate promptly, and help investigate and document security events;
• Support compliance evidence collection in Vanta for SOC 2, ISO 27001, and ISO 42001 alongside the Head of Security & Trust;
• Gather evidence for vendor and customer security questionnaires and flag issues requiring escalation;
• Identify and implement practical improvements to monitoring, alerting, and access control across cloud and endpoint tooling;
• Complete access reviews and joiner/mover/leaver tasks within SLA;
• Maintain endpoint compliance across the device fleet;
• Close security incidents and supported IT/device issues;
• Contribute complete and high-quality evidence to Vanta and vendor reviews.

• Experience in desktop support, IT systems administration, or a similar technical operations role, with a move into or experience in blended IT/security work;
• Hands-on experience with endpoint management such as Intune or similar MDM;
• Experience administering Google Workspace or Microsoft 365;
• Familiarity with cloud basics, including GCP, AWS, or Azure IAM;
• A practical and helpful approach to switching between security work and IT/device support;
• Ownership of problems from start to finish and the ability to work proactively;
• Ability to explain technical issues simply to non-technical colleagues;
• Nice to have: Exposure to compliance or audit evidence gathering such as Vanta, a security certification such as CompTIA Security+, ISC2 Certified in Cybersecurity, or Microsoft SC-900, or clear evidence of self-directed learning.

• 25 Days PTO plus public holidays under a Flexible Time Off scheme;
• Health insurance and private medical cover;
• Monthly stipend for wellness, fitness, and learning and development;
• Work from anywhere in your home country;
• Enhanced parental leave for birth, adoption, or surrogacy;
• Access to the Pencil office in The Shard, London for UK employees;
• Flexible working hours.