Product Security Engineer — Build Secure, Scalable Apps

UTA; Greater London; Hybrid; GBP 80,000 - 120,000; Full time

Job summary

UTA is seeking a Security Engineer - Product Security to embed security into our product design, development, and operation. You will partner with engineering, product, and security teams to implement robust controls across web, mobile, and cloud platforms.

In this role you will lead threat modeling workshops, perform security reviews of cloud deployments, and define security roadmaps with leadership. You will champion secure coding practices and automate security checks in CI/CD pipelines.

Qualifications

• 3+ years in security engineering, application security, or product security roles.
• Experience with cloud security in AWS/Azure/GCP and cloud native architectures.
• Familiarity with identity, authentication, and authorization concepts (OAuth, OIDC, SSO).
• Ability to design secure coding practices, threat modeling, and security reviews.

Responsibilities

• Embed security into design, development, and operation of products and platforms.
• Collaborate with engineering, product, and security teams to implement security controls across applications and services.
• Lead threat modeling workshops and drive mitigations into product design.
• Perform security reviews for cloud deployments (AWS/Azure/GCP) and provide actionable recommendations.
• Define product security requirements and roadmaps with leadership.
• Drive automated security checks in CI/CD (SAST, DAST, SCA, secrets scanning).
• Coordinate security testing, prioritize findings, and remediate with development teams.
• Develop secure coding standards, patterns, and reusable frameworks for engineering teams.

Skills

Security engineering

Agile collaboration

Threat modeling

Security lifecycle

CI/CD security

Education

Bachelors in CS/Cybersecurity/Engineering

Tools

SAST

DAST

SCA

Secrets scanning

WAF

Job description

UTA is seeking a Security Engineer - Product Security to embed security into our product design, development, and operation. You will partner with engineering, product, and security teams to implement robust controls across web, mobile, and cloud platforms.

In this role you will lead threat modeling workshops, perform security reviews of cloud deployments, and define security roadmaps with leadership. You will champion secure coding practices and automate security checks in CI/CD pipelines.