Senior Product Security Architect (AI & Cloud)

Storio group; Greater London; On-site; GBP 120,000 - 170,000; Full time

Job summary

Storio group is seeking a Principal Product Security Engineer to join our London team and embed secure-by-design across our ecommerce platform. You will work with engineers, architects, and product teams to solve complex security problems, influence architectural choices, and raise security capability across the engineering org.

You will define security principles and guardrails, shape the technical direction of Product Security, and provide hands-on expertise across APIs, cloud infrastructure

Qualifications

• 5+ years in Product Security or Application Security.
• Strong security architecture and threat modelling experience.
• Deep knowledge of API security, secure development practices, cloud-native architectures.
• Experience embedding security controls into engineering workflows and SBOMs.
• Excellent communicator who can influence engineers and leaders.
• Interest in AI security and using AI tools to advance security engineering.

Responsibilities

• Define and enforce security principles, standards, and guardrails for rapid engineering without compromising safety.
• Lead threat modelling and security reviews for major products and technology initiatives.
• Provide hands-on security expertise across APIs, microservices, cloud infrastructure (AWS), authentication, authorization, and software supply chain security.
• Mentor Security Champions and embed security across engineering culture.
• Experiment with AI tools to automate security workflows and boost productivity.

Skills

Product Security

Application Security

Security Architecture

Threat Modelling

API Security

Cloud Security (AWS)

SBOMs

Secure SDLC

Automation

AI Security

Security Champions

Bug Bounty

IaC Security

Communication

Tools

AWS

CI/CD

Job description

Storio group is seeking a Principal Product Security Engineer to join our London team and embed secure-by-design across our ecommerce platform. You will work with engineers, architects, and product teams to solve complex security problems, influence architectural choices, and raise security capability across the engineering org.

You will define security principles and guardrails, shape the technical direction of Product Security, and provide hands-on expertise across APIs, cloud infrastructure