London-Based Principal Product Security Engineer — AI & Cloud

Storio group; Greater London; On-site; GBP 110,000 - 160,000; Full time

Job summary

Storio group in London is seeking a Principal Product Security Engineer to shape the security of our ecommerce platform and engineering org. This senior IC role partners with engineers, architects, and product teams to embed secure-by-design practices across APIs, microservices, and cloud infrastructure.

You will drive threat modelling, security architecture reviews, and security automation, while mentoring Security Champions and advancing AI security adoption.

Qualifications

• 5+ years in Product Security, Application Security, or Security Engineering.
• Strong security architecture and threat modelling experience.
• Deep knowledge of application and API security, secure SDLC and cloud-native systems.
• Experience embedding security into engineering workflows and software supply chains.
• Excellent communicator able to influence engineers, architects and leaders without direct authority.
• Interest in AI security and leveraging AI to advance security engineering.

Responsibilities

• Define security principles and guardrails enabling engineers to build securely at pace.
• Shape the strategic technical direction of Product Security across our platform and engineering organisation.
• Provide hands-on expertise across APIs, microservices, cloud infrastructure (AWS), authentication/authorisation, and software supply chain security.
• Lead threat modelling and security architecture reviews for key products and technology initiatives.
• Develop meaningful Product Security metrics to continuously drive security posture improvements.

Skills

Security architecture

Threat modelling

API security

Cloud security

DevSecOps

Security automation

AI security

Security champions

Tools

SBOMs

IaC security tooling

Job description

Storio group in London is seeking a Principal Product Security Engineer to shape the security of our ecommerce platform and engineering org. This senior IC role partners with engineers, architects, and product teams to embed secure-by-design practices across APIs, microservices, and cloud infrastructure.

You will drive threat modelling, security architecture reviews, and security automation, while mentoring Security Champions and advancing AI security adoption.