Security Engineer - Pencil

At Pencil, we are driving innovation in advertising technology through our state-of-the-art SaaS product, which harnesses Generative AI to redefine content creation. Our mission is to make AI the default in advertising without replacing creative people. To achieve this, we need to make sure that our technology isn’t just in the hands of big brands — we need to help small businesses and creative individuals too.

We're looking for a Security & Trust Specialist to join Pencil at a pivotal moment of growth. This is a hands-on, technical role for someone with a background in desktop support, IT systems administration, or a similar technical operations role who is now building a career in security. You'll own the day-to-day security operations that keep Pencil safe — endpoints, identity and access, cloud, and SaaS security — and lend a hand with practical IT and device issues where needed. You'll work directly with our Head of Security & Trust, who will support your growth into audit, compliance, and vendor-risk management over time.

Key Responsibilities

• Administer and secure endpoints (MDM/Intune, patching, encryption, device compliance), and pitch in on practical desktop support and device issues when needed.
• Own day-to-day identity and access management — joiner/mover/leaver processes, least-privilege access, and quarterly access reviews across Google Workspace, Microsoft 365, GCP, and other SaaS tools.
• Monitor security alerts and logs, escalate promptly, and help investigate and document security events (suspicious logins, compromised credentials, device loss, cloud misconfiguration).
• Support compliance evidence collection in Vanta for SOC 2, ISO 27001, and ISO 42001, working alongside the Head of Security & Trust.
• Help gather evidence for vendor and customer security questionnaires and flag items requiring escalation.
• Identify and implement practical improvements to monitoring, alerting, and access control across cloud and endpoint tooling.

Requirements

• Background in desktop support, IT systems administration, or technical operations, moving into or currently doing blended IT/security work.
• Hands-on experience with endpoint management (Intune or similar MDM) and Google Workspace or Microsoft 365 administration.
• Comfortable with cloud basics (GCP, AWS, or Azure IAM) with a willingness to learn fast.
• Exposure to compliance or audit evidence gathering (Vanta or similar) is a bonus.
• Security certification (CompTIA Security+, ISC2 Certified in Cybersecurity, Microsoft SC-900) or clear evidence of self-directed learning.
• A practical, helpful approach with an aptitude for context-switching between security tasks and user IT support.

You’ll Thrive Here If You...

• Enjoy hands-on work and switching between security tasks and immediate IT needs.
• Are motivated to build a career in security and learn from compliance audits and questionnaires.
• Take end-to-end ownership of problems independently.
• Communicate technical issues clearly to non-technical colleagues.

Key Performance Indicators

• Access reviews and joiner/mover/leaver tasks completed within SLA with zero access-control audit findings.
• Fleet endpoint compliance rates (encryption, patching, MDM enrollment).
• Resolution time for security incidents and IT/device support issues.
• Quality and completeness of evidence contributed to Vanta and vendor reviews.

Benefits

• 25 days PTO plus public holidays (Flexible Time Off scheme operating)
• Private medical cover and health insurance
• Monthly stipend for wellness, fitness, and professional learning/development
• Fully remote work within the UK
• Enhanced parental leave policies (birth, adoption, or surrogacy)
• Optional access to the Pencil London office at The Shard
• Flexible working hours

About Pencil & The Brandtech Group

Founded in 2018 by alumni from Google, Facebook, and Uber with backing from Sequoia and Entrepreneur First, Pencil was acquired by The Brandtech Group in 2023. Pencil uses Generative AI to make digital advertising faster, cost-effective, and higher performing while serving as a tool to empower creative professionals.