Job Search

We are seeking a Principal Product Security Practitioner to provide senior technical leadership across the product development lifecycle. You will help build secure-by-design practices, strengthen engineering capability, and ensure that security is embedded into the architecture, delivery, and operation of digital products. Working closely with product, engineering, architecture, cloud, and risk teams, you will influence decisions at both strategic and implementation levels.

Your responsibilities will include defining and evolving product security standards, patterns, and guidance; conducting threat modelling and security architecture reviews; advising on secure software development practices; and supporting the identification, assessment, and remediation of vulnerabilities. You will help establish appropriate security controls, improve security testing and automation within delivery pipelines, and contribute to incident preparedness and response. The role will also involve reviewing emerging technologies, assessing security implications, supporting governance and assurance activities, and communicating complex risks clearly to technical and non-technical stakeholders. You will be expected to champion pragmatic, risk-based solutions rather than simply providing assurance after delivery.

To succeed, you will bring substantial experience in product, application, or software security, with a strong understanding of secure development lifecycles, modern application architecture, cloud environments, APIs, identity, and infrastructure security. You should be confident working with engineers and senior stakeholders, influencing without direct authority, and balancing security, usability, delivery speed, and business objectives. Experience with threat modelling methodologies, vulnerability management, security testing tools, DevSecOps practices, and relevant security frameworks is highly desirable. Strong written and verbal communication, sound judgement, mentoring capability, and a collaborative approach are essential. Professional security certifications or equivalent practical experience would be advantageous.