Senior Product Security Engineer

Arm Limited; Cambridge; On-site; GBP 90,000 - 130,000; Full time

Job summary

Arm Limited is seeking a Senior Software Engineer to help build and scale Metis, our central security analysis platform. You will focus on expanding Software Composition Analysis capabilities and the backend systems that support them at scale.

You will design and implement backend services, Python APIs, and workflow components to enable tool onboarding, analysis execution, results processing, and delivery, while improving scalability and observability across the platform.

Qualifications

• Strong coding ability in Python and shell scripting.
• Experience designing, building, and operating backend services in production.
• Solid API design and service-to-service integration knowledge.
• Experience with cloud environments (AWS) and containers (Docker).
• Familiar with CI/CD practices and modern engineering workflows.

Responsibilities

• Design, build, and maintain core backend services for centralised security analysis and data processing.
• Develop Python services, APIs, and workflow components that support tool onboarding, analysis execution, results processing, and results delivery.
• Improve the scalability, resilience, and operability of the platform as adoption and analysis volume grow.
• Integrate and extend SCA capabilities, while building platform foundations that support adjacent security tooling over time.
• Build observability into services through metrics, dashboards, monitoring, and alerting.
• Work with security and engineering teams to turn requirements into practical platform capabilities.
• Contribute to the evolution of the platform’s backend architecture and service integration.

Skills

Python

APIs design

Backend systems

Cloud environments

Docker

CI/CD

Security tooling

Tools

Docker

AWS

Job description

Job Description

Arm’s Vulnerability Research and Tooling team is looking for a Senior Software Engineer to help build and scale Metis, our central security analysis platform. The team develops backend services and tooling that enable engineering teams to run security analysis centrally, with consistent operations, shared visibility, and actionable security data across the company.

In this role, you will focus on building out Software Composition analysis (SCA) capabilities and the backend systems that support them at scale. You will work on tool integration, results processing, and the services that make analysis outputs usable by engineering teams.

Key Responsibilities

• Design, build, and maintain core backend services for centralised security analysis and data processing.
• Develop Python services, APIs, and workflow components that support tool onboarding, analysis execution, results processing, and results delivery.
• Improve the scalability, resilience, and operability of the platform as adoption and analysis volume grow.
• Integrate and extend SCA capabilities, while building platform foundations that support adjacent security tooling over time.
• Build observability into services through metrics, dashboards, monitoring, and alerting.
• Work with security and engineering teams to turn requirements into practical platform capabilities.
• Contribute to the evolution of the platform’s backend architecture and service integration.

Required Skills and Experience

• Strong coding ability in Python and comfortable in scripting (e.g. bash).
• Proven experience designing, building, and operating backend services or internal platforms in production environments.
• Strong understanding of API design, service-to-service integration, and backend architecture.
• Experience working in cloud environments, ideally AWS.
• Experience with containers and related tooling, for example Docker.
• Familiarity with CI/CD practices and modern engineering workflows.
• Good communication skills and the ability to work effectively across security and engineering teams.

“Nice to Have” Skills and Experience

• Good understanding of SCA concepts, dependency risk, and open source security issues.
• Familiarity with SCA tools and the ability to interpret and work with their findings.
• Experience with large-scale analysis pipelines, data processing, or workflow orchestration.
• Familiarity with observability tooling, operational metrics, and service health dashboards.
• Experience with React or similar front-end technologies.
• Interest in security tooling, vulnerability research, and scalable analysis platforms.

#LI-CI

Accommodations at Arm

At Arm, we want to build extraordinary teams. If you need an adjustment or an accommodation during the recruitment process, please email [e-mail]. To note, by sending us the requested information, you consent to its use by Arm to arrange for appropriate accommodations. All accommodation or adjustment requests will be treated with confidentiality, and information concerning these requests will only be disclosed as necessary to provide the accommodation. Although this is not an exhaustive list, examples of support include breaks between interviews, having documents read aloud, or office accessibility. Please email us about anything we can do to accommodate you during the recruitment process.

Hybrid Working at Arm

Arm’s approach to hybrid working is designed to create a working environment that supports both high performance and personal wellbeing. We believe in bringing people together face to face to enable us to work at pace, whilst recognizing the value of flexibility. Within that framework, we empower groups/teams to determine their own hybrid working patterns, depending on the work and the team’s needs. Details of what this means for each role will be shared upon application. In some cases, the flexibility we can offer is limited by local legal, regulatory, tax, or other considerations, and where this is the case, we will collaborate with you to find the best solution. Please talk to us to find out more about what this could look like for you.

Equal Opportunities at Arm

Arm is an equal opportunity employer, committed to providing an environment of mutual respect where equal opportunities are available to all applicants and colleagues. We are a diverse organization of dedicated and innovative individuals, and don’t discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.