Product Security Specialist

Hargreaves Lansdown Asset Management Limited; Bristol; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading UK investment firm in Bristol is seeking a Product Security Specialist to oversee security across multiple product teams. The successful candidate will work closely with stakeholders, facilitate threat modeling workshops, and ensure compliance with security best practices. This role offers a hybrid working model and includes various benefits such as a discretionary bonus, annual leave, and a robust pension scheme. Candidates with AWS experience and security certifications are preferred.

Benefits

Discretionary annual bonus

25 days holiday plus bank holidays

Flexible working options

Pension scheme up to 11% employer contribution

Private medical insurance

Gym memberships and wellbeing apps

Qualifications

• Experience in a Security related role.
• Proven track record with AWS or other main cloud vendor platforms.
• Familiarity with cloud security standards.

Responsibilities

• Oversee security issues across multiple product teams.
• Lead threat modeling workshops with subject matter experts.
• Engage with stakeholders to recommend security countermeasures.

Skills

Security related experience

AWS experience

Excellent communication skills

Problem solving skills

Agile experience

Technical background in security domains

Education

Certifications such as CISSP, CEH, OSCP, or GSEC

Certifications such as AWS Solutions Architect, Azure Solutions Architect

Tools

Knowledge of security tools and technologies (SAST, DAST, etc.)

Job description

Excited to grow your career?

Our purpose is to make it easy for people to save and invest for a better future. We are looking for great people to join us, so please come and invest in YOUR future at HL.

We know that sometimes people can be put off applying for a job if they don't tick every box. If you're excited about working for us and have most of the skills or experience we're looking for, please go ahead and apply. We'd love to hear from you!

About the role

As a Product Security Specialist (PSS) at HL, you will join a team of security experts who work with various modern technologies to ensure the security of HL's products. You will be the main point of contact for security issues and requirements for each assigned product team/squad, and will support the implementation of secure solutions throughout the development life-cycle. You will also facilitate threat modeling workshops assisting product teams in identifying and mitigating threats.

What you will be doing

• Oversee security related issues across multiple product teams/squads.
• Working within Product teams, you will be the single point of contact for security related matters ranging from daily significant change to complex Cloud serverless transformation projects.
• You will have the ability to work with infrastructure as code and understand complex architectures.
• You will Lead/facilitate threat modeling workshops with SMEs
• Engage with key stakeholders to identify threats and recommend countermeasures.
• Participate in architectural reviews of Product cloud implementations against security best practice, relevant threats and acceptable risks.
• Support in the creation and implementation of architecture blueprints and proof of concepts on Cloud platforms supporting best practice, secure by design.

About you

• Demonstrable experience in a Security related role.
• A proven track record, of working with one or more of the main cloud vendor platforms, specifically AWS.
• Certifications such as AWS Solutions Architect, Azure Solutions Architect are preferred but not required.
• Excellent communication skills, including communicating complex technical concepts to non-technical stakeholders.
• Technical background across multiple security domains and familiarity with cloud security standards.
• Experience within an Agile and DevSecOps context.
• Problem solving skills - with the ability to use own experience to develop pragmatic solutions and resolve complex issues.
• Certifications such as CISSP, CEH, OSCP, or GSEC are preferred but not required.
• Knowledge of security principles, practices, and frameworks, such as OWASP, NIST, and ISO.
• Awareness of security tools and technologies, such as SAST, DAST, IAST, SCA, WAF, IDS, IPS.
• Experience in conducting threat modeling and risk assessments.

Interview process

The interview process for this role is two stages including a technical competency-based questions and a task.

Working Schedule

This role is based in Bristol head office, BS1 5HL. This role is permanent, full time, 37.5 hours per week, Monday to Friday. We have returned to the office, however for this role we offer a hybrid flexible working pattern.

Why us?

Here at HL, we're the UK's number 1 investment platform for private investors, based in Bristol. For more than 40 years we've helped investors save time, tax and money on their investments.

To achieve our mission, we believe we have a workplace like no other, with constant learning, dynamic teams, and a great ethos. We're steered by core values that promote service, quality, innovation, and opportunity in everything we do.

What's on offer?

• Discretionary annual bonus* & annual pay review
• 25 days* holiday plus bank holidays and 1-day additional Christmas closure time
• Option to purchase an additional 5 days holiday (during annual enrolment window, if eligible depending on start date)
• Flexible working options available, including hybrid working
• Enhanced parental leave
• Pension scheme up to 11% employer contribution
• Sharesave scheme - have a real stake in HL's future
• Income Protection & Life insurance (4 x salary core level of cover)
• Private medical insurance*
• Health care cash plans - including optical, dental, and out patientcare
• Help@hand and an Employee Assistance Programme
• Gympass - gym memberships and wellbeing apps available
• Variety of travel to work schemes with free bike storage and shower facilities
• Inhouse barista & deli serving subsidised coffee and sandwiches
• Join HL's sports, I&D networks and volunteering groups (two paid volunteering days per year)
• LifeWorks Discounts on services, restaurants and retailers

* dependant on role level

Hargreaves Lansdown is an inclusive employer that values diversity in its workforce. We encourage applications from all individuals without regard to race, religion, gender, sexual orientation, national origin, disability or age.

This role may also be available on a flexible working or part time basis - please ask the Recruitment & Onboarding team for more information.

Please note, we are unable to provide employment sponsorship to candidates.