Product Security Engineer: Threat Modeling & Cloud

United Talent Agency, LLC; Greater London; Hybrid; GBP 90,000 - 140,000; Full time

Job summary

UTA, a premier global entertainment and talent agency, seeks a Security Engineer – Product Security to embed security into design, development, and operations of our products and platforms. You will partner with engineering, product, and security teams to implement controls across applications and services, safeguarding our brand and assets.

The role focuses on threat modeling, secure SDLC, automated security checks in CI/CD, API security, and incident response.

Qualifications

• Bachelor degree or equivalent practical experience in CS, cybersecurity, or engineering.
• 3+ years in security engineering, app security, or product security roles.
• Familiarity with OWASP Top 10 and preventing vulnerabilities at scale.
• Experience securing apps in AWS and cloud-native architectures.
• Knowledge of SAST/DAST/SCA tooling and CI/CD integration.

Responsibilities

• Support security design and architecture reviews for new and existing products.
• Define product security requirements and roadmaps with leadership.
• Conduct threat modeling workshops to identify risks and mitigations.
• Review security for products deployed on AWS/Azure/GCP with cloud-native controls.
• Own secure SDLC including threat modeling, secure coding, testing, and release validation.
• Drive automated security checks in CI/CD (SAST/DAST/SCA/secrets).
• Coordinate app security testing with development teams to remediate findings.
• Establish secure coding standards and reusable security frameworks.
• Support API security assessments, including REST/GraphQL authentication checks.

Skills

Threat modeling

Cloud security

CI/CD security

OAuth/OIDC/SSO

Communication

Agile

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering

Tools

SAST

DAST

SCA

Secrets scanning

WAF

Terraform

GitHub Actions

Kubernetes

Job description

UTA, a premier global entertainment and talent agency, seeks a Security Engineer – Product Security to embed security into design, development, and operations of our products and platforms. You will partner with engineering, product, and security teams to implement controls across applications and services, safeguarding our brand and assets.

The role focuses on threat modeling, secure SDLC, automated security checks in CI/CD, API security, and incident response.