Senior Product Security Engineer (Edge, Cloud & ML)

One Big Circle; West of England; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Work related training courses

Complimentary snacks and refreshments

Bike to Work Scheme

Secure bike storage and shower

Job summary

One Big Circle Ltd is seeking a senior security engineer to own the end-to-end security of AIVR. You will think like an attacker, identify weaknesses, coordinate remediation with engineering and verify fixes across devices, cloud, web apps, and ML infrastructure.

You’ll drive threat modelling, pentesting and secure coding practices, shaping security architecture and incident response within a fast-growing Bristol tech team.

Qualifications

• Proven ability to model threats and reason about attacker techniques.
• Experience performing penetration tests and validating fixes.
• Ability to review code and configurations for security issues.
• Strong written and verbal communication of findings.

Responsibilities

• Continuously red team our product stack: threat modelling, pentesting, code and config reviews.
• Explain findings and validate fixes with engineers.
• Contribute to AWS security architecture: IAM, networking, encryption, logging.
• Evaluate device security including secure boot and remote access governance.
• Harden the software supply chain: SBOMs, CI/CD integrity, CVE handling.
• Build secure shipping practices: static/dynamic analysis, IaC checks.
• Improve detection/response: logging, alerting, incident involvement.
• Scope and triage third party pen tests and vulnerability reports.
• Document findings clearly for engineers and ISO 27001 evidence.
• Mentor the team and promote secure design culture.

Skills

Threat modelling

Penetration testing

Secure coding

Security architecture

Incident response

Threat hunting

Technical writing

Tools

AWS

Yocto

CI/CD security

Container security

Job description

One Big Circle Ltd is seeking a senior security engineer to own the end-to-end security of AIVR. You will think like an attacker, identify weaknesses, coordinate remediation with engineering and verify fixes across devices, cloud, web apps, and ML infrastructure.

You’ll drive threat modelling, pentesting and secure coding practices, shaping security architecture and incident response within a fast-growing Bristol tech team.