WHO WE ARE
At GetGround, our mission is to make property investment safer, faster and more accessible for everyone.
We’ve built an all-in-one property investment platform that supports investors from opportunity analysis and company formation through to financing, accounting and portfolio management. By bringing software, data and specialist services into one experience, we make property investing simpler, clearer and more cost-effective.
More than 30,000 investors across 70 countries trust us with their identity documents, company records, bank details and the financial picture of their portfolios. Several of our products are regulated by the FCA, and we’re now serving institutional clients and expanding into new markets.
Our security needs to grow faster than we do. We’re looking for someone to own it.
THE OPPORTUNITY
You’ll be GetGround’s first dedicated security engineer. This is a hands-on role with broad ownership. You’ll decide how we prevent, detect and respond to threats across our cloud, devices, identity and SaaS estate, and then build it.
The scope goes beyond configuring tools. You’ll run our SIEM and own our alerts, keep us ahead of a threat landscape that AI is changing fast, and make sure leadership knows where we stand and what we need.
You’ll work closely with our site reliability engineer, product engineers, our Compliance team and our Data Protection Officer. Over time, you’ll be able to shape how security works across GetGround, including the standards, processes and future hires we need.
WHAT YOU’LL DO
- Own our security posture. You’ll be the person accountable for security at GetGround. Assess where we are today and define a roadmap that balances security with what the business needs. Be pragmatic: understand our stage, what risk we can accept for now and what has to be fixed today. Keep leadership informed about our risks, what you need and how we’ll address them.
- Stay ahead of threats. The threat landscape is moving faster than ever, and AI is driving much of that change. AI-generated phishing, deepfake social engineering, prompt injection and data leaking through AI tools are all part of it. Track what’s emerging, judge what matters to a regulated fintech and act before it reaches us.
- Run our SIEM and own our alerts. Make sure logs from GCP, identity, endpoints, SaaS tools and our own platform reach the SIEM and stay there. Write detection rules, map coverage against MITRE ATT&CK, tune out the noise and make sure nothing important goes unnoticed.
- Automate response. Build playbooks that contain common threats as soon as an alert fires. Lead incident response when things go wrong, and make sure we learn from it.
- Protect the data we hold. Know where sensitive data lives, who can access it and when it moves. Secure every channel it passes through: devices through endpoint detection and response (EDR) and anti-malware monitoring and protection, email and cloud storage through data loss prevention, and our platform and tools through access controls. Make the secure path the easy path for everyone at GetGround.
- Work across the business. Partner with our site reliability engineer and product engineers on secure infrastructure and design, and with Compliance on our obligations. Assess vendors and run training people actually remember.
- Set our policies and back them with working controls. Build and keep updating our security policies, best practices and information security management system (ISMS). Implement and automate the technical controls behind our security certifications and frameworks, such as ISO 27001, so that passing an audit reflects how we really operate.
-
WHAT YOU BRING
- Hands-on detection and response experience. You’ve run a SIEM, built detection rules and owned alerting in production. You know what a bad log looks like.
- A habit of staying current. You follow how attackers are using AI and other new techniques. You turn what you learn into concrete defences, not headlines.
-…