Security Engineering Lead

Attio is the CRM for agentic revenue. Designed for the most ambitious go-to-market teams, it gives companies the power to understand every customer, automate at scale, and build their go-to-market motion exactly as they need. We've raised $116M from some of the world's best investors: GV (Google Ventures), Redpoint, Balderton, Point Nine, and 01A.

We hire builders who thrive on complex technical challenges, hold themselves to a high bar, and genuinely care about delighting the people who use what they build. The team here brings sharp judgement, real craft, and the drive to do exceptional work. We're obsessed about the details and energized by the frontier.

If you want to do the best work of your career, this is the right place.

Attio is an AI-native platform trusted with our customers' most sensitive data - and keeping that data secure is foundational to everything we build. As we scale, so does the challenge: a large multi-tenant SaaS platform, AI-driven product features that introduce entirely new attack surfaces, and an engineering team shipping fast with AI-assisted development.

We're looking for a Security Engineering Lead to build and lead Attio's Product Security function, spanning application security and security operations. You'll work alongside our Engineering Leadership to make Attio secure by design, lead the response when things go wrong, and recruit a world-class team of Security Engineers and SecOps practitioners. This is a rare opportunity to define how security works at a company operating at the frontier of AI.

• →

  Build and lead Attio’s Product Security function. Secure Attio’s large-scale, AI-native SaaS platform, and the sensitive customer data on which it operates.

• →

  Work with Engineering Leadership peers to ensure that Attio is secure by design.

• →

  Understand and mitigate the unique risks and attack vectors associated with AI-driven product features, and AI-assisted software development.

• →

  Ensure that Attio is at the forefront of secure software development and operational practices.

• →

  Lead production security incident response; deeply understand security issues and their associated root causes and risks, create remediation plans, and drive to resolution.

• →

  Recruit and retain a world-class team of Security Engineers and SecOps practitioners.

• Full understanding of the Application Security landscape in a high scale, multi-tenant SaaS context.

• Appreciation of the tools and techniques used to secure SaaS applications, through prevention, detection and remediation of security issues. Understanding of how to integrate those tools into an effective, scalable, cost-efficient program that delivers a secure service.

• First-class incident response skills, through the entire incident lifecycle of detection, remediation, clean-up, and post-incident corrective action.

• A recognized “talent magnet” and mentor who can recruit, retain and develop a high-quality Information Security team which continues to deliver for the business as Attio scales.

• Experience of running an Application Security program in a high scale, multi-tenant SaaS context.

• Experience of hiring and managing a team of Security Engineers, and working with cross-functional partners.

• Experience of security certification and re-certification programs.

• Project or program management experience.

• Background in software engineering or systems administration.