Product Security Engineer

Selby Jennings; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hospitality

Job summary

Selby Jennings is seeking a Product Security Engineer to join its Security team, operating at the intersection of security, software engineering, and infrastructure in a highly technical environment. The role partners with software and infrastructure teams to embed security across the development lifecycle, secure cloud platforms and core systems, while enabling developers to move fast.

You'll work across a broad tech stack, perform reviews, and contribute to security tooling within a dynamic,

Qualifications

• 3-5 years of experience in Product Security, Application Security, or related field.
• Solid understanding of secure coding principles and at least one modern language (Python, C++, Rust, Go, Kotlin, or Java).
• Experience with Windows and/or Linux environments and cloud platforms (AWS/Azure).
• Familiarity with threat modelling, vulnerability management, and risk assessment.

Responsibilities

• Partner with engineering teams to embed security into design, development, and deployment.
• Support implementation and operation of security controls across cloud, apps, and core infra.
• Contribute to secure SDLC practices and perform security reviews across languages.
• Conduct threat modelling, vulnerability assessments, and security code reviews.
• Assist with deployment and operation of SAST, DAST, and dependency scanning tools.
• Work with developers to identify, prioritise, and remediate security risks.
• Assess third-party vendors against internal security standards.
• Help drive security awareness and share best practices across teams.
• Contribute to automation and security tooling development.

Skills

Secure coding principles

Programming languages

Cloud security

Threat modelling

CI/CD security

Security tooling

Windows/Linux

AWS/Azure

Vulnerability management

DevSecOps

Tools

SAST

DAST

Dependency scanning

Job description

An industry-leading quantitative investment firm is seeking a Product Security Engineer to join its growing Security team. This is a fantastic opportunity to work at the intersection of security, software engineering, and infrastructure within a highly technical, engineering-led environment.

You will partner closely with software engineers and infrastructure teams to embed security throughout the development lifecycle, helping secure cloud platforms, business applications, and core infrastructure that support a global technology-driven business.

The Opportunity

As a Product Security Engineer, you'll play a key role in improving the security posture of critical systems while enabling developers to move quickly and safely. You'll work across a broad technology stack, contribute to secure development practices, and gain exposure to large-scale, performance-sensitive environments.

Key Responsibilities

• Partner with engineering teams to integrate security into the design, development, and deployment of systems
• Support the implementation and operation of security controls across cloud environments, business applications, and core infrastructure
• Contribute to secure software development practices and perform security reviews across modern programming languages including Python, C++, Rust, Go, and Java/Kotlin
• Conduct threat modelling, vulnerability assessments, and security code reviews
• Assist with the deployment and operation of security tooling such as SAST, DAST, and dependency scanning solutions
• Work with developers to identify, prioritise, and remediate security risks
• Assess third-party vendors and technology providers against internal security standards
• Help drive security awareness and share best practices across engineering teams
• Contribute to automation initiatives and security tooling development

Requirements

• 3-5 years' experience in Product Security, Application Security, Security Engineering, Software Engineering, or a related field
• Strong understanding of secure coding principles and experience with at least one modern programming language such as Python, C++, Rust, Go, Kotlin, or Java
• Solid foundation in software development, infrastructure, or systems architecture
• Knowledge of common application, cloud, and infrastructure security risks and vulnerabilities
• Experience working with Windows and/or Linux environments
• Exposure to AWS and/or Azure cloud platforms
• Understanding of threat modelling, vulnerability management, and risk assessment methodologies
• Experience integrating security tools into CI/CD pipelines and software development workflows
• Passion for learning and developing within a fast-paced engineering environment

Nice to Have

• Experience working with low-latency, distributed, or performance-sensitive systems
• Background in financial services, trading, or other regulated industries
• Experience building automation or security tooling
• Exposure to modern DevSecOps practices