Senior Product Security Engineer (AI & Cloud)

Redgate Software; Cambridge; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Hybrid working

Private health insurance

Wellbeing allowance

Learning & development

Job summary

Redgate Software is seeking a security professional to embed security expertise across engineering teams, defining security requirements throughout the SDLC and making independent calls that keep pace with delivery.

You will lead threat modelling, govern security patterns, drive SAST/DAST adoption, support AI initiatives, and collaborate with multiple product teams in a flexible hybrid Cambridge setup, shaping secure-by-default standards and meaningful risk decisions.

Qualifications

• Hands-on product or application security experience embedded in a modern SDLC.
• Ability to review code and communicate security issues clearly to developers (C# focus).
• Strong knowledge of OWASP Top 10 and practical mitigation patterns.

Responsibilities

• Define and operationalise security requirements across the full SDLC.
• Own or co‑own application security governance: secure‑by‑default standards, patterns, guardrails, and risk exceptions.
• Lead threat modelling for new features and architectural changes.
• Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer‑facing triage guidance.
• Support product teams adopting AI, including LLMs, SLMs, and MCP.

Skills

Product security

Threat modelling

Code review

OWASP Top 10

Cloud security

AWS

Docker

SAST/DAST

Security governance

Tools

SAST tools

DAST tools

CI/CD pipelines

Job description

Redgate Software is seeking a security professional to embed security expertise across engineering teams, defining security requirements throughout the SDLC and making independent calls that keep pace with delivery.

You will lead threat modelling, govern security patterns, drive SAST/DAST adoption, support AI initiatives, and collaborate with multiple product teams in a flexible hybrid Cambridge setup, shaping secure-by-default standards and meaningful risk decisions.