Remote Product Security Engineer

Action1; United Kingdom; Remote; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Fully remote work environment

Real security product to work on

High ownership and impact on product

Job summary

Action1 seeks a Product Security Engineer to join the team securing its multi-tenant SaaS product. You’ll work with engineering, product, and security to identify risks early, support vulnerability handling, and improve secure development practices.

This hands-on role suits someone who understands software engineering and cybersecurity, collaborating directly with developers to embed security without slowing teams down.

Qualifications

• 3+ years of experience in product security or related field.
• Strong software engineering background and ability to work with engineering teams.
• Understanding of cloud security and software supply chain risks.
• Experience with threat modeling and security design reviews.
• Familiarity with vulnerability management and incident response.

Responsibilities

• Support PSIRT and vulnerability handling activities.
• Validate, triage, track, and coordinate security reports.
• Provide practical remediation guidance to engineering teams.
• Help validate security fixes and reduce product security risks.
• Review code, APIs, and architecture to identify security issues early.
• Conduct threat modeling and security design reviews.
• Improve security automation in engineering workflows.
• Support SAST, SCA, secrets scanning, and other security controls.
• Maintain SBOMs, dependency visibility, and remediation follow-up.
• Support security assessments, vulnerability assessments, and penetration testing.
• Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks.

Skills

Product security

Software engineering

Threat modeling

Cloud security

Security assessments

Incident response

Communication

Tools

SAST

SCA

SBOMs

CI/CD pipelines

Job description

Action1 seeks a Product Security Engineer to join the team securing its multi-tenant SaaS product. You’ll work with engineering, product, and security to identify risks early, support vulnerability handling, and improve secure development practices.

This hands-on role suits someone who understands software engineering and cybersecurity, collaborating directly with developers to embed security without slowing teams down.