Senior Product Security Engineer - Cloud & App Security

GCA Altium; Cambridge; On-site; GBP 80,000 - 110,000; Full time

Job summary

Altium Limited is seeking a Staff/Senior Product Security Engineer to extend its security capability for the Altium 365 cloud platform. The role focuses on continuous vulnerability discovery and prevention, ensuring secure operation of existing functionality and new changes.

You will work with engineering teams to reproduce issues, prioritize fixes, and validate remediation in a multi-tenant, cloud-native SaaS environment.

Qualifications

• 5+ years in Application / Product Security
• Bachelor's Degree or equivalent of 12 years of work experience
• Strong hands‑on experience in: Web application security testing, API security, Threat modeling methodologies, Deep understanding of OWASP Top 10
• Experience with: Manual penetration testing, Security regression testing, CI/CD security integration, Ability to identify business logic vulnerabilities
• Strong understanding of: Authentication, authorization, and session management; Multi-tenant architectures; Cloud-native systems

Responsibilities

• Design and maintain security regression test suites covering critical application flows and ensure vulnerabilities, once fixed, do not recur
• Lead structured threat modeling sessions for existing system components and new features and translate threats into test cases and mitigations
• Perform manual and automated security testing simulating real attacker behavior and validate exploitability and business impact
• Continuously assess the platform against OWASP Top 10 categories and uncover non-obvious vulnerabilities beyond tooling
• Review new features for security risks and ensure changes are threat-modeled and covered by regression tests
• Collaborate with engineering, architecture, and SRE teams to enable secure-by-design practices and scale security through reusable patterns and tooling

Skills

Web application security

API security

Threat modeling

OWASP Top 10

Manual penetration testing

CI/CD security

Security regression testing

Auth & session management

Multi-tenant security

Cloud-native security

Education

Bachelor's degree or equivalent

Job description

Altium Limited is seeking a Staff/Senior Product Security Engineer to extend its security capability for the Altium 365 cloud platform. The role focuses on continuous vulnerability discovery and prevention, ensuring secure operation of existing functionality and new changes.

You will work with engineering teams to reproduce issues, prioritize fixes, and validate remediation in a multi-tenant, cloud-native SaaS environment.