Senior Product Security Engineer (AI & Cloud)

red-gate; Cambridge; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Hybrid working

Wellbeing allowance

Paid time off

Private health insurance

Job summary

Redgate in Cambridge is seeking a security-focused professional to embed security expertise across our engineering teams, shaping standards and threat modelling throughout the SDLC. You will make independent security calls and partner with product and engineering squads to integrate secure-by-default practices.

You’ll lead threat modelling for new features, drive SAST/DAST adoption, and support AI-related initiatives, ensuring pragmatic risk reduction over checkbox compliance in a fast-paced,

Qualifications

• Hands-on product or application security experience embedded across the SDLC.
• Ability to review code and clearly communicate security issues to developers.
• Strong knowledge of the OWASP Top 10 with practical mitigation patterns.
• Experience with SAST/DAST processes: tool tuning and triage workflows.
• Understanding of cloud and container security, ideally with AWS and Docker.

Responsibilities

• Partner directly with engineering and product teams to define and operationalise security requirements across the full SDLC.
• Own or co-own application security governance: secure-by-default standards, patterns, guardrails, and risk exceptions.
• Lead threat modelling for new features and architectural changes, turning findings into practical engineering work.
• Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer-facing triage guidance.
• Support product teams adopting AI, including LLMs, SLMs, and MCP, giving visibility into work security roles wouldn't touch.

Skills

Product/application security

Code review

OWASP Top 10

SAST/DAST processes

Cloud and container security

Tools

SAST tools

DAST tools

AWS

Docker

Job description

Redgate in Cambridge is seeking a security-focused professional to embed security expertise across our engineering teams, shaping standards and threat modelling throughout the SDLC. You will make independent security calls and partner with product and engineering squads to integrate secure-by-default practices.

You’ll lead threat modelling for new features, drive SAST/DAST adoption, and support AI-related initiatives, ensuring pragmatic risk reduction over checkbox compliance in a fast-paced,