London-Based Senior Software Security Engineer

Nothing Technology; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Nothing in London is seeking an experienced security engineer to own the security lifecycle across backend services and cloud platforms. You will define secure development standards and drive vulnerability management in a fast-paced product environment.

Collaborate with mobile, OS and privacy teams to align with global regulations and apply advanced threat modelling and AI-enabled testing to fortify defenses.

Qualifications

• 6+ years in application security and secure production posture.
• Deep threat modelling expertise.
• Hands-on cloud security with AWS, GCP, Azure.
• Secure SDLC experience: SAST, DAST, SBOM.
• Experience applying AI or LLMs to security.
• Strong cryptography and identity fundamentals (TLS, OAuth 2.0, SSO).
• Production-quality code in Python/Go/Java/C++.

Responsibilities

• Own security lifecycle and secure architecture for backend services and cloud platforms.
• Define secure development standards and wire SAST/DAST/SBOM tooling.
• Own vulnerability management end to end and drive closure.
• Design security testing including pentesting and fuzzing.
• Ship network, server-side and data protection measures.
• Collaborate with mobile, OS and desktop teams on client-side security.
• Work with privacy and legal to meet regulatory requirements incl. AI.
• Lead threat modelling across authentication and data protection.

Skills

Application security

Threat modelling

Cloud security

Secure SDLC

AI security

Cryptography basics

Identity security

Production code quality

Tools

AWS

GCP

Azure

Job description

Nothing in London is seeking an experienced security engineer to own the security lifecycle across backend services and cloud platforms. You will define secure development standards and drive vulnerability management in a fast-paced product environment.

Collaborate with mobile, OS and privacy teams to align with global regulations and apply advanced threat modelling and AI-enabled testing to fortify defenses.