Lead Product Security Engineer

Tricentis; London; Hybrid; GBP 50,000 - 90,000; Full time

Job summary

An innovative firm is seeking a seasoned information security expert to lead security initiatives in a hybrid work environment. This role involves driving the security roadmap for secure software development lifecycle (SSDLC), collaborating with engineering and DevOps teams, and providing technical guidance on security practices. The ideal candidate will have over six years of progressive experience in information security, a deep understanding of DevSecOps principles, and significant experience with cloud technologies like AWS and Azure. Join a rapidly expanding company that values personal and professional development, offering a competitive salary and exciting office events to enhance your work experience.

Benefits

Competitive salary + bonus

Favorable working atmosphere

Hybrid work environment

Personal and professional development

Variety of career opportunities

Exciting office events

Welfare activities

Qualifications

• 6+ years in information security with a focus on technical leadership.
• Experience with secure software development and cloud technologies.

Responsibilities

• Drive security roadmap for SSDLC adoption across product portfolio.
• Establish guidelines based on industry best practices for solutions.

Skills

Information Security

Secure Software Development Lifecycle

Cloud Technologies (AWS, Azure)

DevSecOps Principles

Security Testing and Automation

Vulnerability Management

Technical Leadership

Communication Skills

Education

BSc/MSc in Cybersecurity or related fields

Tools

SAST

DAST

SCA

Job description

Responsibilities:

• Drive security roadmap for SSDLC adoption across product portfolio, implementing security practices in alignment with DevSecOps principles
• Establish guidelines and architectural principles based on industry best practices for both cloud-native and on-premise solutions
• Partner with Engineering, DevOps and SRE and collaborate on cross functional initiatives
• Propose and drive security initiatives aligned with business goals, focusing on cloud technologies
• Provide technical guidance to product security engineers and security champions

In order to be considered for this role, you must have:

• 6+ years of progressive experience in information security including technical leadership roles
• Significant experience with secure software development lifecycle, security testing, vulnerability management
• Experience with cloud technologies (AWS, Azure), security testing and automation (SAST, DAST, SCA)
• Deep understanding of DevSecOps principles and agile development
• Knowledge of secure architecture and design principles, industry standards (NIST SSDF, OWASP) and security best practices
• Ability to formulate technical concepts, propose security solutions and communicate effectively to both technical staff and non-technical stakeholders.
• Following is considered a plus:
  • Recognized industry certifications (CISSP, CSSLP, CISM ..)
  • Experience with governance and security certifications (SOC2, ISO27001, FIPS)
  • Bsc/Msc degrees or equivalent formal education in cybersecurity or related fields

Tricentis Core Values:

• Demonstrate Self-Awareness: Own your strengths and limitations.
• Finish What We Start: Do what we say we are going to do.
• Move Fast: Create momentum and efficiency.
• Run Towards Change: Challenge the status quo.
• Serve Our Customers & Communities: Create a positive experience with each interaction.
• Solve Problems Together: We win or lose as one team.
• Think Big & Believe: Set extraordinary goals and believe you can achieve them.

We offer:

• Competitive salary + bonus
• Favorable working atmosphere in a rapidly expanding company
• Hybrid work environment
• Personal and professional development
• Variety of career opportunities and a wide range of tasks
• Exciting office events and welfare activities. Join us for a rewarding work experience!

Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran.