Product Security Engineer

ZipRecruiter; City Of London; Hybrid; GBP 70,000 - 80,000; Full time

Job summary

A leading e-commerce company in the gifting industry seeks a Security Product Engineer to integrate security into their products. The role includes threat modeling, application security, and collaboration with developers, offering a salary of £70,000-£80,000 with substantial benefits. The position is hybrid, requiring one day in the office, and is open to UK remote candidates.

Benefits

Growth opportunities

Extensive benefits offering

Visa sponsorship available

Qualifications

• Strong knowledge of secure coding practices and OWASP Top 10.
• Experience with application security and cloud security initiatives.
• Some software development experience is beneficial.

Responsibilities

• Act as the bridge between engineering and security.
• Conduct threat modeling and design reviews for system security.
• Implement and manage application security tooling.

Skills

application and product security

CI/CD pipelines

cloud security expertise (AWS, Azure, GCP)

excellent communication

Tools

application security tooling

SAST tools

Job description

Overview

Security Product Engineer

London or Manchester (Hybrid, 1 day per week) | £70,000-£80,000 + Benefits | Sponsorship Available

Few&Far are partnered with a fast growing UK based e-commerce company in the gifting industry. They combine creativity, technology, and data to deliver personalised and meaningful experiences to millions of customers each year.

They are looking for a Security Product Engineer to join their group security team, supporting multiple brands and playing a critical role in shaping secure-by-design practices across their products and platforms.

Responsibilities

• Act as the bridge between engineering and security, embedding secure-by-design principles into the product lifecycle.
• Conduct threat modelling and design reviews to ensure systems are secure before build.
• Implement and manage application security tooling (SAST, IaC scanners, CI/CD security).
• Partner with developers to catch vulnerabilities early and guide pragmatic risk decisions.
• Support cloud security initiatives (AWS-first, Azure exposure beneficial), covering IAM, encryption, and secrets management.
• Contribute to a collaborative and pragmatic security culture, documenting risks and communicating trade-offs to the business.

What They’re Looking For

• Strong knowledge of application and product security (OWASP Top 10, secure coding practices).
• Experience with CI/CD pipelines, IaC, and SAST tools.
• Cloud security expertise - AWS (Azure, GCP also welcome).
• Some software development experience
• Excellent communicator, able to balance security needs with business priorities.

Location & Ways of Working

• London (Manchester tech hub also an option).
• Hybrid: typically 1 day per week in the office, with travel expenses covered.
• Open to remote candidates in the UK with occasional office travel to either destination.
• Visa sponsorship available (Partial support).

Package

• Base salary: £70,000–£80,000
• Growth opportunities in a scaling security team.
• Extensive benefits offering

Please apply ASAP if you think this is you and someone from our team will get in touch if you\'re a match.