Product Security Engineer — AI-Driven DevSecOps

Bloomberg; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Bloomberg in London is seeking a Product Security Engineer to build and maintain automated security capabilities across the software development lifecycle. You will collaborate with engineering partners to deliver high‑fidelity security testing, including SAST, DAST, SCA, secret searching, and LLM‑based assessments, driving secure development practices at scale.

You will prototype new tools, integrate security testing into pipelines, and help teams translate findings into actionable mitigations

Qualifications

• 3+ years of software development experience.
• Strong programming in at least one of: C/C++, Python, JavaScript/TypeScript.
• Experience with DevOps tools and development pipelines.
• Knowledge of OWASP Top 10 and language-specific vulnerabilities.
• Experience with LLMs or AI-assisted tooling in technical workflows.

Responsibilities

• Develop automated security capabilities across the SDLC.
• Prototype tools and integrate security testing into pipelines.
• Lead security testing approaches—SAST, DAST, SCA, secret scanning.
• Collaborate with engineering teams to remediate findings.
• Research and implement AI-assisted security workflows.

Skills

Software development

C/C++ & Python

DevOps in pipelines

Secure code review

LLM/AI tooling

Tools

GitHub

Jenkins

CMake

npm

Maven

Gradle

Job description

Bloomberg in London is seeking a Product Security Engineer to build and maintain automated security capabilities across the software development lifecycle. You will collaborate with engineering partners to deliver high‑fidelity security testing, including SAST, DAST, SCA, secret searching, and LLM‑based assessments, driving secure development practices at scale.

You will prototype new tools, integrate security testing into pipelines, and help teams translate findings into actionable mitigations