Principal Product Security Engineer

ImmigrationGPT; Greater London; Hybrid; GBP 110,000 - 140,000; Full time

Job summary

PhotoBox Ltd in London is seeking a Principal Product Security Engineer to shape security across our ecommerce platform and engineering organisation. This senior individual contributor role sits at the intersection of Product Security and Application Security, working directly with engineers, architects, and product teams to embed secure-by-design engineering as the standard.

You will have significant autonomy to define security principles, guardrails, and drive secure adoption of AI, with a

Qualifications

• Senior-level security engineering experience.
• Strong background in security architecture and threat modelling.
• Deep knowledge of API and application security, cloud-native systems.

Responsibilities

• Collaborate with engineers, architects, and product teams to embed secure-by-design practices.
• Mentor Security Champions and scale security across teams.
• Lead threat modelling and security architecture reviews for key initiatives.
• Develop security automation to improve outcomes while reducing friction for engineers.
• Guide AI security adoption and measure security metrics.

Skills

Product Security

Application Security

Threat Modelling

Security Architecture

Cloud Security (AWS)

AI Security

Security Automation

Communication

Tools

AWS

SBOMs

Bug Bounty Programs

IaC Security

Job description

# Principal Product Security EngineerPhotoBox Ltd, London, UKApply on PhotoBox Ltd's site Check my CV against this jobPosted: TodayContract: permanentListed on: Direct from the employer## Can this job be sponsored?Some things to check* We could not tell the occupation from the title. Whether a job can be sponsored depends on its occupation code. Look up the occupation code (CASCOT)* PhotoBox Ltd holds an A-rated Skilled Worker licence. Register of licensed sponsors, GOV.UKRead from the advert, the Home Office register and the Immigration Rules. Whether you can be sponsored also depends on your own circumstances, such as your age and visa history. This is information, not advice.AdvertisementDiscover moreApply for VisasvisaVisa## About the jobMake Your Mark as an Principal Product Security Engineer at Storio groupAbout the role.You will be based in our London office, where you will help shape how security is built into our ecommerce platform and engineering organisation. This is a senior individual contributor role operating at the intersection of Product Security and Application Security. You will work directly with engineers, architects, and product teams to solve complex security problems, influence technical decisions, and make secure-by-design engineering the standardnorm. You will have significant autonomy and influence to establish practical security standards, raise security capability across teams, and guide the secure adoption of AI across our engineering ecosystem.How you embrace curiosity daily.- You collaborate closely with engineers, architects, and product teams to find turn security challenges into pragmatic solutions for security challenges.- You mentor engineers and Security Champions to make security increasingly embedded within engineering culture.-You build and enable security automation that improves security outcomes while reducing friction for engineering teams.-You lead threat modelling and security architecture reviews for key products and technology initiatives to identify problems early.-You experiment with and adopt AI tools creatively to automate security engineering workflows and boost productivity.How you make your mark.- You define security principles, standards, patterns, and guardrails that enable engineers to build securely at pace.-You shape the strategic technical direction of Product Security across our entire platform and engineering organisation.-You protect our platform by providing hands-on expertise across APIs, microservices, cloud infrastructure (AWS), authentication, authorisation, and software supply chain security.-You identify and mitigate emerging security risks,including those introduced by AI, and communicate potential impact clearly to senior stakeholders.-You measure what matters by developing meaningful Product Security metrics to continuously drive security posture improvements.What you bring to the team.- You bring significant (5+ years) experience in Product Security, Application Security, or Security Engineering within a modern software environment.-You have strong experience in security architecture and threat modelling, with a proven ability to turn risk into practical engineering solutions.-You possess deep technical knowledge of application and API security, secure development practices, modern software architectures, and cloud-native systems.-You bring experience embedding security controls into engineering workflows, software supply chains (SBOMs), and the broader software development lifecycle.-You are an excellent communicator who builds trust and influences engineers, architects, and senior technical leaders without relying on direct authority.-You have experience with, or a strong interest in, AI security and leveraging AI tools to advance security engineering.What sets you apart.- You have hands-on experience with Infrastructure as Code (IaC) security, scaling Security Champions programs, or managing Bug Bounty programs.-You hold relevant industry or cloud security certifications (e.g., CISSP, CSSLP, AWS Security Specialty), though we care far more about your practical impact than the certificates you hold.