Senior Product Security Engineer (AI/Cloud Native)

Remote Worker LTD.; Cambridge; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Hybrid working

Monthly wellbeing allowance

Private health insurance

Job summary

Redgate is seeking a security professional to embed security expertise across its product teams, guiding threat modelling, governance, and secure SDLC practices.

You will define security requirements, lead governance, and drive SAST/DAST adoption while supporting AI-related security initiatives and cloud-native security across the engineering organization. This role operates across multiple teams with real authority to make independent security calls rather than relying on scanners.

Qualifications

• Hands-on product or application security experience embedding security across the SDLC.
• Ability to review code and clearly communicate security issues to developers (C# focus; Java/Python exposure).
• Strong knowledge of the OWASP Top 10 and practical mitigations.
• Experience implementing or improving SAST/DAST: tuning, triage workflows, reducing noise.
• Understanding of cloud and container security fundamentals, ideally AWS and Docker.

Responsibilities

• Partner with engineering/product teams to define security requirements across the full SDLC.
• Own or co-own application security governance: secure-by-default standards, patterns, guardrails, and risk exceptions.
• Lead threat modelling for new features and architectural changes.
• Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer-facing triage guidance.
• Support product teams adopting AI, including LLMs, SLMs, and MCP.

Skills

Application security

Code review (C#)

OWASP Top 10

SAST/DAST processes

Cloud security fundamentals

AWS security

Docker

Tools

AWS

Docker

Job description

Redgate is seeking a security professional to embed security expertise across its product teams, guiding threat modelling, governance, and secure SDLC practices.

You will define security requirements, lead governance, and drive SAST/DAST adoption while supporting AI-related security initiatives and cloud-native security across the engineering organization. This role operates across multiple teams with real authority to make independent security calls rather than relying on scanners.