Job Search

We are seeking a Principal Product Security Engineer to provide technical leadership across the product development lifecycle and help build secure, resilient, and trustworthy digital products. In this role, you will define and evolve product security strategy, establish practical engineering standards, and influence architecture and delivery decisions from early design through deployment and ongoing improvement. You will work closely with software engineers, architects, product managers, infrastructure specialists, and leadership to identify and reduce security risk while enabling teams to deliver at pace.

Your responsibilities will include leading threat modelling, security architecture reviews, secure design assessments, and risk analysis for complex products and services. You will develop and maintain secure coding guidance, security patterns, and engineering controls, and help embed security into CI/CD pipelines, development workflows, and operational processes. You will support vulnerability management, security testing, incident response, and remediation planning, while providing expert guidance on application, cloud, API, identity, data, and supply-chain security. You will also mentor security and engineering colleagues, promote security awareness, and represent product security in technical forums and governance discussions.

We are looking for substantial experience in product, application, or software security, with a strong background in secure architecture and modern software development practices. You should be confident working with cloud platforms, APIs, distributed systems, containers, automation, and DevSecOps approaches, as well as industry-standard security frameworks and threat modelling techniques. Strong communication, influencing, and stakeholder-management skills are essential, along with the ability to explain complex risks clearly and translate them into proportionate, actionable improvements. Experience leading security initiatives across multiple teams, contributing to security strategy, and coaching engineers is highly desirable. Relevant professional certifications or equivalent practical experience are welcome.

We are seeking a Senior Product Security Engineer to help build security into the design, development, and operation of software products. In this role, you will partner closely with product managers, software engineers, architects, and infrastructure teams to identify risks early and deliver practical, scalable security solutions. You will influence security strategy across the product lifecycle, from initial requirements and architecture through implementation, release, and ongoing improvement.

Your responsibilities will include leading threat modelling and security reviews, identifying vulnerabilities, and advising engineering teams on effective remediation. You will help define secure coding standards, design and implement security controls, and improve processes for vulnerability management, security testing, and incident response. You will contribute to security tooling and automation, integrate security checks into CI/CD pipelines, and support the development of metrics that demonstrate product security maturity. The role will also involve reviewing technical designs, assessing third-party integrations, supporting penetration testing, and helping teams respond to security findings in a timely and sustainable way. You will be expected to mentor engineers, promote security awareness, and communicate complex risks clearly to both technical and non-technical stakeholders.

The successful candidate will have significant experience in product or application security, with a strong understanding of secure software development practices and common application vulnerabilities. Experience with threat modelling methodologies, security testing tools, cloud environments, APIs, identity and access management, and modern development workflows is required. You should be comfortable reviewing code in at least one programming language and working with technologies such as containers, infrastructure as code, and automated deployment pipelines. Knowledge of relevant security standards and frameworks, along with experience influencing without direct authority, would be valuable. We are looking for a pragmatic, collaborative professional who can balance risk with delivery, work independently, and turn security objectives into clear, actionable guidance.