Product Security Engineer (Remote) — AI-Driven SecurityOS

doxy.me; Greater London; Remote; GBP 90,000 - 150,000; Full time

Benefits offered by this job

Unlimited PTO

Private medical, optical and dental健康

5% matched company pension

Remote working with occasional London,

Company equipment + £500 spending on a

Job summary

doxy.me is seeking a senior security-focused software engineer to own SecurityOS for its telemedicine platform. You will design and code secure features, govern AI agents, and collaborate with product teams to embed security by default across the stack.

You will drive threat modeling, secure design, and manual/automated security testing, shaping the roadmap for security engineering and tooling. A remote-dominant role with occasional London presence supports global distributed teams.

Qualifications

• Solid production experience with TypeScript/Node.js.
• Deep knowledge of secure SDLC, threat modeling, and code review.
• Experience with AI-enabled platforms and agent-based systems.

Responsibilities

• Design and build core SecurityOS capabilities for doxy.me platform.
• Build and govern AI agents within the platform ensuring controls/audits.
• Own product security through threat modeling, design/code reviews, and implementation when needed.
• Develop security tooling and guardrails to automate SDLC at scale.

Skills

TypeScript

Node.js

Application security

Threat modeling

Secure SDLC

Code review

AI integration

Cross-functional collaboration

Education

Bachelor's degree in Computer Science or related field

Equivalent experience

Tools

AWS

Kubernetes

Infrastructure as Code

Job description

doxy.me is seeking a senior security-focused software engineer to own SecurityOS for its telemedicine platform. You will design and code secure features, govern AI agents, and collaborate with product teams to embed security by default across the stack.

You will drive threat modeling, secure design, and manual/automated security testing, shaping the roadmap for security engineering and tooling. A remote-dominant role with occasional London presence supports global distributed teams.