Security Engineer

Arrows Group Professional Limited; City Of London; On-site; GBP 100,000 - 140,000; Full time

Job summary

Arrows Group Professional Limited is seeking a Senior Product Security Engineer in London to embed security into the product and engineering environment. This role blends software engineering with security, requiring you to dive into the codebase, build tooling and fix vulnerabilities rather than only report them.

You'll work closely with Software and Infrastructure Engineers across areas including product and application security, cloud infrastructure security, and secure SDLC practices as the

Qualifications

• Strong commercial software engineering experience.
• Experience with TypeScript/JavaScript and Node.js.
• Solid understanding of application and product security.
• Experience with AWS/cloud infrastructure.
• Ability to investigate vulnerabilities and implement fixes.

Responsibilities

• Identify and remediate vulnerabilities directly in the codebase.
• Build internal security tooling and automation.
• Improve security across CI/CD and engineering workflows.
• Shape security architecture as the company scales.
• Collaborate with Software and Infrastructure Engineers on security.
• Foster secure software development practices.

Skills

Software Engineering

TypeScript/JavaScript

Node.js

Application security

AWS/cloud infrastructure

Vulnerability investigation

Security tooling

Job description

Senior Product Security Engineer

GBP100,000-GBP140,000+ | Permanent | London | AI

One of London's fastest-growing AI startups is looking for a Senior Product Security Engineer to help build security directly into its product and engineering environment.

This isn't a traditional InfoSec position. They're looking for a strong Software Engineer who understands security - someone comfortable getting directly into the codebase, building tooling and fixing vulnerabilities rather than simply identifying or reporting them.

The role

You’ll work closely with Software and Infrastructure Engineers across areas including:

• Product and application security
• Identifying and remediating vulnerabilities directly in the codebase
• Building internal security tooling and automation
• Cloud and infrastructure security
• Secure software development practices
• Improving security across CI/CD and engineering workflows
• Helping shape security architecture as the company scales

What they're looking for

The ideal profile will have:

• Strong commercial Software Engineering experience
• Experience with TypeScript/JavaScript and Node.js
• Strong understanding of application and product security
• Experience working with AWS/cloud infrastructure
• Ability to investigate vulnerabilities and implement the fixes yourself
• Experience working within modern, high-quality engineering environments

You do not need to have spent your entire career in Security. Strong Backend or Product Engineers who have meaningful security knowledge and want to specialise further are encouraged to apply.

Key details

• GBP100k-GBP140k+, with scope higher for exceptional/Principal-level profiles
• Permanent
• High-growth, heavily funded AI company
• London-based, office-first with some flexibility
• Sponsorship can be considered
• Two-stage interview process

This is an opportunity to join a high-calibre engineering environment where security is being treated as an engineering problem - with genuine ownership over how it is built into the product as the company scales.