Senior Product Security Engineer — Cloud Platform

Renesas Electronics; Cambridge; On-site; GBP 90,000 - 120,000; Full time

Job summary

Renesas Electronics is seeking a Senior Product Security Engineer to reinforce our product security with continuous vulnerability discovery and prevention. You will drive threat modeling, security regression testing, red team-style activities, and OWASP Top 10 driven discovery, collaborating with engineering teams to identify and remediate real risks.

The role emphasizes enabling developers through practical guidance and scalable security practices, while ensuring changes are threat-modeled and

Qualifications

• 5+ years in Application / Product Security.
• Hands-on web app and API security experience.
• Deep OWASP Top 10 knowledge.
• Experience with security regression testing and CI/CD security.
• Ability to identify business logic vulnerabilities.
• Strong understanding of authentication, authorization and session management.

Responsibilities

• Build security regression test suites for core flows.
• Lead threat modeling sessions for existing and new features.
• Perform Red Team-style testing and offensive security activities.
• Identify vulnerabilities based on platform understanding and OWASP Top 10.
• Collaborate with engineering to reproduce issues and validate fixes.
• Ensure changes are threat-modeled and covered by regression tests.

Skills

Security engineering

Threat modeling

OWASP Top 10

Web security testing

API security

Penetration testing

CI/CD security

Auth & authorization

Education

Bachelor's Degree or equivalent

Job description

Renesas Electronics is seeking a Senior Product Security Engineer to reinforce our product security with continuous vulnerability discovery and prevention. You will drive threat modeling, security regression testing, red team-style activities, and OWASP Top 10 driven discovery, collaborating with engineering teams to identify and remediate real risks.

The role emphasizes enabling developers through practical guidance and scalable security practices, while ensuring changes are threat-modeled and