Principal Product Security Practitioner

Reference: yzg4y1tyrvcmdjurx1w0

We are seeking a Principal Product Security Practitioner to provide senior technical leadership across the product development lifecycle. You will help build secure-by-design practices, strengthen engineering capability, and ensure that security is embedded into the architecture, delivery, and operation of digital products. Working closely with product, engineering, architecture, cloud, and risk teams, you will influence decisions at both strategic and implementation levels.

Your responsibilities will include defining and evolving product security standards, patterns, and guidance; conducting threat modelling and security architecture reviews; advising on secure software development practices; and supporting the identification, assessment, and remediation of vulnerabilities. You will help establish appropriate security controls, improve security testing and automation within delivery pipelines, and contribute to incident preparedness and response. The role will also involve reviewing emerging technologies, assessing security implications, supporting governance and assurance activities, and communicating complex risks clearly to technical and non-technical stakeholders. You will be expected to champion pragmatic, risk-based solutions rather than simply providing assurance after delivery.

To succeed, you will bring substantial experience in product, application, or software security, with a strong understanding of secure development lifecycles, modern application architecture, cloud environments, APIs, identity, and infrastructure security. You should be confident working with engineers and senior stakeholders, influencing without direct authority, and balancing security, usability, delivery speed, and business objectives. Experience with threat modelling methodologies, vulnerability management, security testing tools, DevSecOps practices, and relevant security frameworks is highly desirable. Strong written and verbal communication, sound judgement, mentoring capability, and a collaborative approach are essential. Professional security certifications or equivalent practical experience would be advantageous.

COMPETITIVE SALARY
Added 02/10/2026
Reference: yzg4y1tyrvcmdjurx1w0

Other similar jobs

Principal Product Security Engineer

Added 17/09/2026

We are seeking a Principal Product Security Engineer to lead the integration of security throughout the product development lifecycle. In this influential role, you will define and advance product security strategy across software, cloud services, APIs, and connected technologies. You will partner with engineering, architecture, product management, privacy, and operations teams to identify risks early, establish pragmatic security requirements, and ensure that security is built into products by design. Your responsibilities will include driving threat modelling, secure architecture reviews, vulnerability management, security testing, and risk assessments for complex products and platforms. You will develop and maintain security standards, patterns, and...

Learn more

Cloud Security Engineer – Leeds – National Security West

Added 01/09/2026

We are seeking a Cloud Security Engineer to support the design, implementation and continual improvement of secure cloud environments for customers operating in sensitive and highly regulated sectors. Based in Leeds, this role offers the opportunity to work on complex national security programmes, helping to protect critical systems, data and services against evolving cyber threats. You will collaborate with architects, developers, infrastructure specialists and security professionals to deliver robust, resilient and compliant cloud solutions. Your responsibilities will include designing and deploying security controls across cloud platforms, reviewing architectures, and providing technical guidance on identity and access management, encryption, network security,...

Learn more

Cloud Security Engineer – Gloucester - National Security West

Added 25/08/2026

We are seeking a Cloud Security Engineer to support the design, implementation and assurance of secure cloud services within a national security environment in Gloucester. You will work closely with cloud architects, infrastructure engineers, software teams and security specialists to ensure that cloud platforms and applications are resilient, compliant and protected against evolving threats. The role will involve contributing to secure-by-design principles across the full service lifecycle, from initial architecture and development through to deployment, operation and continuous improvement. Your responsibilities will include developing and maintaining cloud security architectures, applying security controls across platforms such as Microsoft Azure or Amazon...

Learn more

Cloud Security Engineer - Gloucester - National Security West

Added 25/08/2026

We are seeking a Cloud Security Engineer to support the design, implementation and continual improvement of secure cloud environments within a national security-focused technology team in the Gloucester area. You will work with architects, developers, infrastructure specialists and delivery teams to ensure that cloud platforms and services are resilient, compliant and protected against evolving threats. The role offers the opportunity to contribute to technically challenging projects where security, reliability and operational excellence are essential. Your responsibilities will include developing and maintaining cloud security controls across platforms such as Microsoft Azure and/or Amazon Web Services; implementing identity and access management, encryption,...

Learn more

Cyber Security Analyst

Added 13/10/2026

We are seeking a Cyber Security Analyst to help protect critical systems, data, and services from evolving cyber threats. In this role, you will monitor security events, investigate alerts, and support the identification, containment, and remediation of incidents across a varied technology environment. You will work closely with infrastructure, applications, and risk teams to strengthen security controls and promote effective cyber security practices. Key responsibilities include analysing logs and alerts from security monitoring tools, investigating suspicious activity, and escalating incidents in line with established procedures. You will contribute to vulnerability management activities, including reviewing scan results, assessing risk, tracking remediation,...

Learn more

Graduate Security Consultant

Added 13/10/2026

We are seeking a motivated Graduate Security Consultant to join a growing team delivering practical security advice to a diverse range of clients. This is an excellent opportunity for a recent graduate or early-career professional to develop expertise across information security, risk management, governance, and compliance. You will work alongside experienced consultants, gaining exposure to different industries, technologies, and business environments while building the skills needed for a successful career in security consulting. Your responsibilities will include supporting security assessments, reviewing policies and procedures, identifying risks, and helping clients develop proportionate controls and improvement plans. You may contribute to activities...

Learn more

Graduate Security Consultant

Added 13/10/2026

We are seeking a motivated Graduate Security Consultant to join a growing professional services team and support clients in protecting their people, information, systems, and operations. This entry-level role offers the opportunity to develop practical experience across cybersecurity, risk management, governance, and security improvement projects. You will work alongside experienced consultants, learning how to understand client requirements, assess risks, and recommend proportionate, effective controls. Your responsibilities will include contributing to security assessments, documenting findings, researching threats and vulnerabilities, and helping develop reports, policies, procedures, and improvement plans. You may support activities such as risk assessments, security reviews, compliance evaluations, control...

Learn more

Cyber Security Engineer

Added 13/10/2026

We are seeking a Cyber Security Engineer to help protect critical systems, applications, networks and data from evolving cyber threats. In this role, you will contribute to the design, implementation and continuous improvement of security controls across a complex technology environment. You will work closely with infrastructure, software development, cloud and operations teams to embed security throughout the technology lifecycle and support a strong, risk-aware culture. Your responsibilities will include monitoring and investigating security alerts, supporting incident response activities and conducting vulnerability assessments across infrastructure, endpoints, applications and cloud services. You will help manage security tooling such as SIEM, endpoint...

Learn more

Security Consultant

Added 28/09/2026

We are seeking an experienced Security Consultant to provide expert advice and practical guidance across a range of information and cyber security initiatives. The successful candidate will work with stakeholders to understand business risks, assess current security capabilities, and recommend proportionate controls that support operational and strategic objectives. This role requires a confident communicator who can translate complex technical risks into clear, actionable information for both technical and non-technical audiences. Key responsibilities will include conducting security assessments, risk analyses, control reviews, and gap assessments against recognised security frameworks and regulatory requirements. You will contribute to the development and improvement of...

Learn more

Senior C++ Software Engineer (Cyber Security)

Added 24/09/2026

We are seeking a Senior C++ Software Engineer to develop high-performance cybersecurity solutions that protect critical systems, applications, and data. In this role, you will design, implement, and maintain robust software components used to detect, prevent, and respond to sophisticated security threats. You will work across the full development lifecycle, from technical analysis and architecture through to coding, testing, deployment, and ongoing improvement. The position offers the opportunity to contribute to technically challenging products in an environment where reliability, performance, and secure engineering are essential. Your responsibilities will include developing modern C++ applications and services, reviewing code, investigating complex defects,...

Learn more

SOC Security Architect

Added 21/09/2026

We are seeking an experienced SOC Security Architect to design, develop and continuously improve the security architecture supporting a modern Security Operations Centre. In this role, you will define the technical vision for monitoring, detection and response capabilities across cloud, on-premises and hybrid environments. You will work closely with security operations, infrastructure, network, application and risk teams to ensure that security controls are effective, scalable and aligned with business and regulatory requirements. Your responsibilities will include designing and maintaining SOC reference architectures, developing security monitoring and detection strategies, and supporting the selection and integration of SIEM, SOAR, EDR, vulnerability management...

Learn more

Security Testing Consultant (Penetration Tester) Hybrid

Added 15/09/2026

We are seeking a Security Testing Consultant (Penetration Tester) to join a collaborative cybersecurity team on a hybrid basis. In this role, you will plan and deliver penetration tests across web applications, APIs, mobile platforms, infrastructure, cloud environments and networks. You will assess security controls, identify vulnerabilities and determine the potential business impact of weaknesses using recognised testing methodologies and industry-standard tools. The position involves working with technical and non-technical stakeholders to understand environments, agree testing objectives and provide clear, practical advice to improve security resilience. Your responsibilities will include conducting manual and automated security assessments, validating findings, safely exploiting...

Learn more

Graduate Cyber Security

Added 15/09/2026

We are seeking a motivated Graduate Cyber Security professional to join a collaborative technology and risk team. This is an excellent opportunity for a recent graduate or early-career candidate to develop practical experience across cyber security operations, information assurance and risk management. You will work alongside experienced specialists to help protect systems, data and services while building a strong foundation for a long-term career in cyber security. Responsibilities will include assisting with the monitoring and investigation of security alerts, supporting vulnerability assessments and helping to maintain accurate records of security incidents, risks and controls. You may contribute to security reviews,...

Learn more

Security, Culture, Education & Awareness Practitioner

Added 15/09/2026

We are seeking a Security, Culture, Education & Awareness Practitioner to help strengthen security culture and improve awareness across a diverse workforce. You will support the development and delivery of engaging security education, awareness and behavioural change initiatives, helping colleagues understand their responsibilities and make informed, secure decisions in their day-to-day work. This role is suited to someone who can translate complex security concepts into clear, practical and accessible communications for a range of audiences. Your responsibilities will include creating and maintaining security awareness content, guidance, campaigns, learning materials and communications across multiple channels. You will coordinate activities such as...

Learn more

Cyber Security Practitioner

Added 20/08/2026

We are seeking a skilled Cyber Security Practitioner to join our dynamic team. In this role, you will be responsible for monitoring, detecting, and responding to security threats and incidents across our digital infrastructure. You will conduct risk assessments, implement security measures, and ensure compliance with industry standards and regulations. Collaborating with cross-functional teams, you will identify vulnerabilities and recommend improvements to enhance our security posture. The ideal candidate will possess a strong understanding of various security frameworks and technologies, including firewalls, intrusion detection systems, and encryption protocols. You should have experience in incident response and be familiar with security...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.