Security Engineer

💬 ACCURX IS SOLVING HEALTHCARE PRODUCTIVITY FOR THE NHS. For decades, the NHS has struggled with fragmented systems that make simple tasks feel impossible. At Accurx, we’re changing that by building a single, system-wide platform that helps every patient get gold-standard, efficient, and joined-up care. What started as a way for GPs to text a patient has now evolved into an all-in-one digital toolkit used by 98% of GP practices. Our platform now powers Total Triage https://www.accurx.com/primary-care to manage patient demand, and Self-Book, https://www.accurx.com/booking which lets patients schedule their own appointments in seconds. We’ve automated routine care with Patient Questionnaires https://www.accurx.com/questionnaires for long-term conditions, while Accumail https://www.accurx.com/accumail finally allows staff-to-staff communication to happen instantly across different care settings. We’re now pushing the boundaries of the consultation itself with Accurx Scribe https://www.accurx.com/scribe, our AI-powered note-taker that drafts medical notes in real-time. We’re not just shipping features. We’re giving clinicians their time back and ensuring every patient journey is as smooth as it should be. THE TEAM You'll join Accurx's Security Engineering & Operations team, on the front line of protecting patient and NHS data across our products, cloud platform, and corporate systems. Millions of patients and clinicians rely on Accurx every day, and the NHS trusts us as a supplier handling some of the most sensitive data there is. Every vulnerability you triage, account you audit, or system you help harden directly reduces real-world risk for real people. As we push to become an AI-native company, this team also makes sure new AI tooling — LLM features, agents and MCP integrations get adopted safely, so we never trade patient data security for speed. CHALLENGES YOU’LL SOLVE... - Run and review vulnerability scans across our estate, tracking findings through to remediation and keeping teams accountable to SLAs - Help harden our cloud services and systems against CIS/NIST baselines, turning good practice into concrete, actioned recommendations - Get hands-on during security incidents, helping detect, respond to, and write up incidents, and keeping our playbooks sharp and current - Audit user accounts and access across our systems, catching stale accounts, weak passwords, and anomalies before they become problems - Review new AI tools and MCP server requests referred by our Privacy team, assessing what data they'd touch and what model sits behind them, and help maintain our inventory of approved AI tooling - Apply our AI Development Risk Framework to new AI experiments, checking the right controls (data classification, environment isolation, encryption, credential handling) are in place before anything goes live - Contribute to threat modelling and design reviews, helping teams build securely from the start rather than bolting it on later - Help educate technical teams across the business on security fundamentals, in a way that's approachable, blame-free, and genuinely useful YOU SHOULD APPLY IF... - You want to build foundational depth in one or two security domains; this role is about reliably executing strong processes, not setting strategy from day one - You get satisfaction from the unglamorous-but-critical work: patching, auditing, reviewing, knowing it protects real patients - You're curious about how AI tooling can be adopted safely, and want hands-on exposure to reviewing LLM features, agents, and AI risk frameworks - You communicate clearly and transparently, and you'd rather support a colleague than point fingers when something goes wrong - You're comfortable picking up new tools and playbooks quickly, whether that's a scanning tool, an SSO platform, or an incident response process - You want your day-to-day work to have a direct, visible link to protecting the NHS and the patients it serves WHAT’S IN IT FOR ME? You'll b…