Senior Product Security Engineer

Formula.; Greater London; Hybrid; GBP 108,000 - 132,000; Full time

Benefits offered by this job

Equity

Private healthcare

Pension

Learning & development

Job summary

Formula. in London / remote is seeking a Senior Product Security Engineer to embed security into product design and delivery. You will work closely with engineering and product teams, contribute early in architecture discussions, and address security in AI-enabled workflows.

The role is hands-on across product security, API security and cloud infrastructure, with opportunities to influence security strategy as the company scales.

Qualifications

• Hands-on experience across Product Security / Application Security.
• Strong threat modelling experience.
• Excellent API security knowledge.
• Hands-on offensive security / penetration testing experience.
• Ability to read and review code.
• Experience with cloud-based environments.
• Security certifications are advantageous, but practical experience matters.

Responsibilities

• Drive threat modelling across new and existing product architecture.
• Help establish and evolve a Secure by Design approach.
• Identify and mitigate security risks across web applications, APIs and cloud infrastructure.
• Work hands-on across application and product security.
• Carry out penetration testing and vulnerability assessments.
• Review code and architecture to identify security weaknesses.
• Investigate emerging security challenges around AI-powered products and workflows.
• Turn technical findings into practical remediation and improved engineering practices.
• Build strong relationships with engineering and product teams.
• Help shape security strategy as the organisation grows.

Skills

Threat modelling

Application Security

Penetration Testing

Code Review

Cloud Security

AI Security

Job description

Senior Product Security Engineer | Hands-on IC |

London / Remote | Up to £120,000 + Benefit

I'm working with a high-growth digital business that's investing heavily in its engineering and security capabilities as it continues to scale.

They're looking for a Senior Product Security Engineer who can operate hands-on within engineering while helping embed security into the way products are designed, built and shipped.

This isn't a traditional security gatekeeper role. You'll be working closely with engineers and product teams, getting involved early in architectural decisions and helping teams understand and solve security problems in practical ways.

The role:

• Drive threat modelling across new and existing product architecture
• Help establish and evolve a Secure by Design approach
• Identify and mitigate security risks across web applications, APIs and cloud infrastructure
• Work hands-on across application and product security
• Carry out penetration testing and vulnerability assessments
• Review code and architecture to identify security weaknesses
• Investigate emerging security challenges associated with AI-powered products and workflows
• Turn technical findings into practical remediation and improved engineering practices
• Build strong relationships with engineering and product teams
• Help shape security strategy as the organisation continues to grow

One of the particularly interesting aspects of this role is the opportunity to work on the security implications of AI and increasingly autonomous systems.

You'll be thinking about areas such as AI-driven workflows, manipulation of model inputs, unintended actions, data exposure and how security controls need to evolve as products become more intelligent.

What I'm looking for:

Someone with strong hands-on experience across Product Security / Application Security, ideally within a modern product-led engineering environment.

You'll ideally bring:

• Strong threat modelling experience
• Excellent application and API security knowledge
• Hands-on offensive security / penetration testing experience
• Strong understanding of modern software architecture
• Ability to read and review code
• Experience working with cloud-based environments
• Relevant security certifications are advantageous, but practical experience matters most
• Strong communication skills and the ability to influence engineers without becoming a blocker
• An interest in the evolving security challenges around AI

The package:

A competitive salary alongside equity, private healthcare, pension, learning & development support and a strong wider benefits package.

This is a great opportunity for someone who wants to move beyond traditional vulnerability management and security tooling and have a genuine influence on how products are designed and secured.