Senior IT Security Specialist

Veo is an AI-powered sports camera and analysis ecosystem built for one job: turning what happens on a pitch into proof. Capture, viewing, data and analytics, sharing- all in one system, all pointed at the same thing.

That's bigger than football. Every player, on every pitch, gets access to the kind of proof only the top academies used to keep for themselves. It's the future we're building.

Every youth match still has a moment nobody saw. A run that won the game, underneath everyone's radar. A kid written off before anyone actually checked. We exist to close that gap, one match at a time.

One camera on any pitch feeds an AI that tracks every player and the ball for the whole game, turning what happened into evidence instead of somebody's opinion.

That's the actual job here. Not shipping features. Building the system that gives proof to someone who used to rely on a hunch.

If you've ever watched a match and wondered who else saw what you saw, you already know why this matters.

We're looking for people who want to build that future with us.

What You Will Do

You'll be hands-on across endpoint, identity, and operational security, and you'll be the go-to person for IT security across the business.

Own endpoint security across our macOS, Windows, Linux, iOS and Android devices, including EDR, MDM, patching, encryption and hardening baselines

Define and enforce our BYOD approach, using conditional access, device compliance checks and data separation so people can work flexibly without putting company data at risk

Run SSO, SCIM and MFA across our SaaS applications, and own onboarding and offboarding so access is granted and removed on time, every time.

Build identity governance, including regular access reviews, least-privilege access, and clear ownership of who has access to what

Lead IT incident response from detection and triage through containment, investigation and post-incident review, and keep our playbooks sharp

Monitor and respond to CVEs affecting our endpoints and SaaS tools, assessing risk, prioritizing fixes, and making sure patches are applied on time

Plan and run phishing simulations and security awareness training that change behavior, and measure the results

Drive day-to-day operational security, including alert monitoring, vulnerability management, SaaS vendor assessments, and keeping policies and runbooks current

Lead our IT security work for GDPR and NIS2, from implementing controls to maintaining documentation and evidence, together with Legal and GRC

Help lay the groundwork for future SOC 2 and ISO 27001 certification

Own our office security systems, such as CCTV and door access, working with our Office Manager

What You Could Bring

You've likely spent several years in IT security or security operations, ideally in a growing tech company, and you're comfortable being the person who owns security end-to-end.

That experience tends to show up in several of the following:

• Endpoint and device security: hands-on with EDR and MDM tools such as CrowdStrike, SentinelOne, Hexnode, Intune or Kandji, across desktop and mobile, including securing BYOD environments

• Identity and access: deep experience with Google Workspace and Entra rolling out SSO, SCIM, and MFA, and running joiner/mover/leaver processes and access reviews.

• Incident response: you've led real incidents end-to-end and can stay calm and clear under pressure.

• Vulnerability management: you track CVEs, judge real-world risk quickly, and get fixes rolled out.

• Security culture: you've run phishing awareness programs and can explain risk in plain language to people who aren't technical.

• Compliance in practice: you've applied GDPR and NIS2 requirements in an operational role. Experience with SOC 2 or ISO 27001 is a strong advantage as we work towards them.

• Linux: administration and hardening experience is highly valued.

 

Nice To Have

• Scripting and automation (Python, PowerShell, Bash)
•  SIEM experience
• Certifications such as CISSP, CISM, OSCP, or GIAC