Job Search

We are seeking a Product Security Engineer to help build secure, resilient products from design through deployment. In this role, you will work closely with software engineering, architecture, infrastructure, quality assurance, and product teams to identify security risks early and ensure that security is embedded throughout the development lifecycle. You will contribute to practical, scalable security solutions that protect customer data, business systems, and product functionality.

Your responsibilities will include conducting threat modelling and security reviews, assessing application and system designs, and advising teams on secure coding and architecture principles. You will help define and maintain security requirements, standards, and engineering guidelines, while supporting vulnerability management, penetration testing, dependency analysis, and remediation activities. You will investigate security findings, prioritise risks based on business impact, and work with development teams to implement effective corrective actions. You may also contribute to security tooling, automation, security testing in CI/CD pipelines, incident response, and the continuous improvement of product security processes.

We are looking for experience in product, application, or software security, together with a strong understanding of common vulnerabilities, secure development practices, authentication and authorisation, data protection, and cloud or distributed systems. Familiarity with security frameworks such as OWASP, threat modelling methodologies, source code analysis, and modern DevSecOps practices is highly desirable. You should be comfortable communicating technical risks to both technical and non-technical audiences, influencing without direct authority, and balancing security requirements with usability and delivery goals. A curious, collaborative, and pragmatic approach is essential, along with the ability to manage multiple priorities and work effectively in a changing environment. Relevant professional experience, certifications, or a degree in computer science, cybersecurity, or a related discipline will be valued.

We are seeking a Senior Product Security Engineer to help embed security throughout the product development lifecycle. In this role, you will partner with software engineers, product managers, architects, and infrastructure teams to identify risks, define practical security controls, and deliver secure, resilient products. You will contribute to security strategy while remaining hands-on in assessing applications, services, APIs, cloud environments, and supporting technologies.

Your responsibilities will include leading threat modelling and secure design reviews, conducting vulnerability assessments, and advising engineering teams on remediation. You will develop and maintain security guidance, patterns, and standards; improve application security testing across the development pipeline; and support the integration of tools such as static analysis, dynamic testing, software composition analysis, and secrets detection. You will also investigate complex security issues, help prioritise findings according to business impact, and contribute to incident response, security architecture reviews, and continuous improvement initiatives. Clear documentation and effective communication will be essential, as you will translate technical risks into actionable recommendations for both technical and non-technical stakeholders.

To succeed, you should have substantial experience in product or application security, with strong knowledge of secure software development practices, common web and API vulnerabilities, identity and access management, cryptography fundamentals, and cloud security principles. Experience with modern programming languages, CI/CD systems, infrastructure as code, containers, and security automation is highly desirable. Familiarity with recognised security frameworks and standards, such as OWASP guidance, NIST practices, or equivalent, would be advantageous. You should be comfortable influencing teams, mentoring colleagues, balancing security with usability and delivery goals, and working independently in a changing environment. Relevant professional certifications or demonstrable contributions to security engineering, research, or open-source projects are welcome.

We are seeking a Product Security Engineer to help build secure, resilient products from design through deployment. In this role, you will partner with software engineers, architects, product managers and operations teams to identify and address security risks across the product lifecycle. You will contribute to security strategy, develop practical guidance and help embed secure-by-design principles into engineering processes without compromising usability or delivery.

Your responsibilities will include conducting threat modelling, reviewing system architectures and code, supporting security requirements definition, and assessing vulnerabilities across applications, APIs, cloud environments and connected services. You will design and improve security controls, contribute to secure development standards, and support vulnerability management, penetration testing and security investigations. You will also help establish appropriate security tooling and automation, define meaningful security metrics, and work with engineering teams to prioritise and remediate findings. Where incidents or product security concerns arise, you will provide clear technical analysis and help coordinate effective responses.

The successful candidate will have professional experience in product, application or software security, together with a strong understanding of secure software development practices, common vulnerability classes and modern application architectures. Experience with threat modelling methodologies, code review, security testing, CI/CD pipelines, cloud platforms and identity or access management is highly desirable. You should be comfortable working with developers and technical stakeholders, explaining complex risks clearly and recommending proportionate solutions. A proactive, collaborative approach, strong problem-solving skills and the ability to manage multiple priorities are essential. Relevant qualifications in cybersecurity, computer science or a related discipline are welcome, as are recognised security certifications, but practical experience and a commitment to continuous learning are equally valued.

We are seeking a Product Security Engineer to help build secure, resilient products throughout their lifecycle. You will work closely with software engineering, platform, architecture, quality assurance, and product teams to identify security risks early and integrate effective controls into design, development, testing, and release processes. This role is suited to someone who enjoys solving complex technical problems, influencing engineering practices, and translating security requirements into practical solutions.

Your responsibilities will include conducting threat modelling, design and architecture reviews, and security assessments for new and existing products. You will identify vulnerabilities through code reviews, automated scanning, penetration testing coordination, and analysis of security findings, then support teams in prioritising and remediating issues. You will help develop secure coding standards, reusable security patterns, and guidance for application and cloud development. You will also contribute to security tooling, vulnerability management, incident investigations, and continuous improvements to secure development and delivery pipelines.

We are looking for experience in product, application, or software security, with a solid understanding of secure software development principles and common vulnerability classes such as those described by OWASP. You should be comfortable working with modern programming languages, APIs, cloud platforms, CI/CD pipelines, containers, and version-control systems. Experience with threat modelling methodologies, security testing tools, identity and access management, and relevant security frameworks is desirable. Strong communication and collaboration skills are essential, as you will explain technical risks to varied audiences and work constructively with engineering teams. Relevant professional certifications or equivalent practical experience are welcome. This position offers the opportunity to shape security practices, improve product quality, and make a measurable contribution to the protection of customers and systems.

We are seeking a Principal Product Security Engineer to lead the integration of security throughout the product development lifecycle. In this influential role, you will define and advance product security strategy across software, cloud services, APIs, and connected technologies. You will partner with engineering, architecture, product management, privacy, and operations teams to identify risks early, establish pragmatic security requirements, and ensure that security is built into products by design.

Your responsibilities will include driving threat modelling, secure architecture reviews, vulnerability management, security testing, and risk assessments for complex products and platforms. You will develop and maintain security standards, patterns, and guidance; advise teams on secure coding and authentication, authorisation, cryptography, data protection, and cloud security; and help establish measurable security objectives and controls. You will also assess emerging technologies and threats, support incident response and root-cause analysis, and contribute to security reviews for new features, acquisitions, integrations, and significant architectural changes. Where appropriate, you will help automate security checks within CI/CD pipelines and improve the visibility and remediation of product security risks.

The successful candidate will bring significant experience in product or application security, with a strong understanding of secure software development and modern engineering practices. You should be comfortable influencing senior stakeholders and technical teams without relying on formal authority, translating complex security issues into clear business and engineering decisions. Experience with cloud platforms, APIs, containers, infrastructure as code, software supply-chain security, and common application security testing tools is highly desirable. Relevant professional certifications or equivalent practical experience are welcome. We value curiosity, sound judgement, strong communication, and a collaborative approach, along with the ability to balance security, usability, delivery timelines, and customer needs.

We are seeking a Product Security Engineer to help build secure, resilient products from design through deployment. You will work closely with software engineering, product management, infrastructure, and quality teams to identify security risks early and embed practical security controls throughout the development lifecycle. The role combines hands-on technical work with advisory responsibilities, supporting teams in delivering secure and reliable customer experiences.

Your responsibilities will include conducting threat modelling, architecture and design reviews, and security assessments for new and existing products. You will identify vulnerabilities, recommend effective remediation strategies, and help prioritise security improvements based on risk and business impact. You will contribute to secure coding standards, security testing strategies, and automation within CI/CD pipelines, including static and dynamic analysis, dependency scanning, secrets detection, and container or cloud security checks. You will also investigate security issues, support incident response activities, and help develop repeatable processes for vulnerability management and security risk tracking.

The successful candidate will have professional experience in product, application, or software security, with a strong understanding of common web, API, cloud, and mobile security risks. Familiarity with frameworks such as OWASP and experience using security testing tools and automation are expected. Knowledge of secure software development practices, identity and access management, cryptography fundamentals, and modern cloud environments would be valuable. You should be comfortable reviewing code, communicating technical risks to varied audiences, and influencing teams without relying on direct authority. Strong analytical, problem-solving, and collaboration skills are essential, as is a proactive approach to learning and improving security practices.

We are seeking a Senior Product Security Engineer to help protect products and services throughout their development lifecycle. In this role, you will work closely with software engineering, architecture, infrastructure, and product teams to embed security into design, development, testing, and deployment. You will provide practical guidance on secure architecture, threat modelling, vulnerability management, authentication and authorisation, data protection, and secure software development practices.

Your responsibilities will include leading security reviews for new and existing products, identifying and prioritising risks, and supporting teams in delivering effective remediation. You will develop and maintain security standards, patterns, tooling, and documentation, while helping to improve security controls across cloud environments, APIs, applications, and third-party integrations. You will also contribute to security automation, code and dependency scanning, penetration testing coordination, incident investigations, and the continuous improvement of product security processes. An important part of the role will be mentoring engineers and promoting a practical, risk-based security culture.

You will bring substantial experience in product, application, or software security, together with a strong understanding of secure development methodologies and modern engineering practices. Experience with cloud platforms, containerised workloads, CI/CD pipelines, threat modelling frameworks, and common application security risks is highly desirable. You should be comfortable reviewing code and architecture, communicating technical risks to varied audiences, and influencing decisions without relying on formal authority. Relevant industry certifications or equivalent practical experience are welcome. The successful candidate will be curious, collaborative, and pragmatic, with the ability to balance robust security requirements against usability, delivery timelines, and business priorities.

We are seeking a Senior Product Security Engineer to help build secure, resilient products from design through release and beyond. You will work closely with software engineers, architects, product managers and operations teams to identify risks early, define practical security requirements and embed security into the development lifecycle. This role is suited to an experienced security professional who can combine strong technical expertise with clear communication and a pragmatic, collaborative approach.

Your responsibilities will include conducting threat modelling, architecture and design reviews, secure code reviews, and vulnerability assessments across web applications, APIs, cloud services and supporting infrastructure. You will help develop and maintain security standards, patterns and engineering guidance, while supporting teams to remediate findings effectively. You will also contribute to security testing strategies, including automation, penetration testing coordination, dependency management, secrets protection and software supply chain security. Where incidents or significant vulnerabilities arise, you will assist with investigation, risk assessment, containment and lessons-learned activities.

The successful candidate will have substantial experience in product or application security, with a strong understanding of secure software development principles and common vulnerabilities such as those outlined by OWASP. Experience with cloud platforms, CI/CD pipelines, infrastructure as code, container security and security tooling is highly desirable. You should be comfortable reviewing code in at least one modern programming language and translating complex technical risks into actionable recommendations for both technical and non-technical stakeholders. Relevant professional certifications are welcome but not essential. We value curiosity, sound judgement, ownership and the ability to influence teams without relying solely on authority.

We are seeking an Advisory Engineer to join an Enterprise Product Security Incident Response Team (E-PSIRT). In this role, you will help identify, assess, coordinate, and resolve security vulnerabilities affecting enterprise products, platforms, and services. You will act as a trusted technical adviser to engineering, product, infrastructure, and customer-facing teams, helping to ensure that security issues are managed consistently, efficiently, and in line with established response processes.

Your responsibilities will include investigating reported vulnerabilities and security incidents, validating technical findings, assessing severity and potential business impact, and coordinating remediation activities across multiple stakeholders. You will contribute to vulnerability response plans, security advisories, risk assessments, and incident documentation, while supporting clear and timely communication with internal teams and, where appropriate, external researchers or customers. You will also help improve response procedures, develop repeatable playbooks, identify trends, and provide guidance on secure engineering practices. The role may involve analysing logs, code, configurations, and technical reports, as well as supporting post-incident reviews and corrective action tracking.

The successful candidate will bring experience in product security, vulnerability management, incident response, application security, or a closely related discipline. Strong knowledge of common vulnerability concepts, CVE and CVSS methodologies, threat modelling, secure development principles, and security testing practices is expected. You should be comfortable interpreting technical information, prioritising competing issues, and explaining complex security risks to both technical and non-technical audiences. Experience with cloud environments, software development lifecycles, automation, scripting, and security tools is advantageous. We value sound judgement, attention to detail, collaborative working, and the ability to remain organised and decisive in a fast-moving environment. Relevant professional certifications or equivalent practical experience are welcome.

We are seeking a Staff Product Security Engineer to help shape and advance security across the product development lifecycle. In this senior technical role, you will partner with engineering, product, infrastructure, and research teams to embed secure-by-design principles into products, platforms, and services. You will help define security strategy, influence technical direction, and raise the overall standard of application and product security across the organisation.

Your responsibilities will include leading threat modelling and security architecture reviews for complex systems, identifying and prioritising product risks, and providing practical guidance on secure design and implementation. You will develop and maintain security patterns, standards, and engineering guidance, while supporting teams with vulnerability management, security testing, code review, and remediation planning. You will also contribute to the evolution of security tooling and automation, improving the ability to detect, prevent, and respond to security issues throughout the software development lifecycle. As a trusted subject-matter expert, you will advise on security incidents, communicate risk to technical and non-technical stakeholders, and mentor engineers and security practitioners.

The successful candidate will bring extensive experience in product, application, or software security, with a strong understanding of secure software development, threat modelling, identity and access management, cryptography, cloud environments, APIs, and common web and infrastructure vulnerabilities. You should be comfortable reviewing architecture and code, analysing complex problems, and balancing security requirements with usability, performance, and delivery goals. Experience influencing across multiple engineering teams, building security programmes, and working with modern development and deployment practices is highly valued. Strong written and verbal communication skills, sound judgement, and the ability to work independently in a collaborative environment are essential. Relevant industry experience, security certifications, or a background in software engineering are advantageous.