Principal Product Security Engineer

You will assess web and mobile applications for vulnerabilities, conduct threat modelling, guide secure design, and remediate issues through patches and actionable tickets. You will embed security automation into CI/CD pipelines, secure cloud-native applications, communicate risks clearly, and mentor junior engineers.

Responsibilities

• Investigate web and mobile technologies for vulnerabilities
• Secure cloud-native applications
• Conduct threat modelling and guide secure design
• Remediate vulnerabilities through initiatives, patches, and actionable tickets
• Advise on application security
• Mentor and coach junior engineers
• Integrate security automation into CI/CD pipelines

Requirements

• Application security expertise
• Cloud-native application security
• Threat modelling
• Secure design
• Burp Suite or an attack proxy
• Proof-of-concept scripting
• Written and spoken communication
• Web and mobile application security
• CI/CD security automation

Benefits

• Group Life Insurance
• Vitality Health Insurance
• 24/7 Employee Assistance Programme
• 25 days holiday with the ability to buy extra days
• £1,000 professional L&D budget per year
• Cycle to Work scheme
• Pension contribution
• All-day snacks bar
• Enhanced family-friendly leave
• 3 days for L&D or volunteering time off per year
• Flexible working options
• Sabbatical leave
• Share options