Senior App Security Engineer — AI-Driven CI/CD Security

Sonos, Inc.; Glasgow; On-site; GBP 60,000 - 90,000; Full time

Job summary

Sonos, Inc. is seeking a Product Security Engineer to own the execution layer of product security across cloud, mobile, and embedded engineering domains. You will implement and operationalize security tooling, drive secure-by-design practices, and scale threat modeling efforts.

Work with cross-functional teams to embed security into CI/CD pipelines, perform automated and targeted assessments, and coordinate third-party testing as needed. Glasgow-based role with collaborative culture.

Qualifications

• 4+ years in software engineering or product security.
• Experience embedding security into CI/CD workflows.
• Experience with AI-powered security tooling and threat modeling.

Responsibilities

• Automate and scale security tooling across cloud, mobile, and embedded domains.
• Lead threat modeling, testing practices, and secure-by-design initiatives.
• Coordinate third-party penetration testing and vulnerability disclosures.

Skills

Security engineering

CI/CD integration

Threat modeling

AI tooling for security

Tools

SAST

SCA

DAST

Secrets scanning

Job description

Sonos, Inc. is seeking a Product Security Engineer to own the execution layer of product security across cloud, mobile, and embedded engineering domains. You will implement and operationalize security tooling, drive secure-by-design practices, and scale threat modeling efforts.

Work with cross-functional teams to embed security into CI/CD pipelines, perform automated and targeted assessments, and coordinate third-party testing as needed. Glasgow-based role with collaborative culture.