Senior Product Security Engineer - Secure-by-Design AI & Cloud

Storio group; Greater London; On-site; GBP 120,000 - 190,000; Full time

Job summary

Storio group in London seeks a Principal Product Security Engineer to shape security across our ecommerce platform and engineering organisation. This senior IC role collaborates with engineers, architects and product teams to embed secure-by-design engineering as standard practice.

You will define security principles, lead threat modelling, and guide security across APIs, cloud infrastructure (AWS) and software supply chains, while driving AI security initiatives and measurable security posture

Qualifications

• 5+ years in Product Security, Application Security or Security Engineering.
• Strong experience in security architecture and threat modelling.
• Deep technical knowledge of application and API security, cloud-native systems.
• Experience embedding security controls into engineering workflows and SBOMs.
• Excellent communicator able to influence engineers and senior leaders without authority.
• Interest in AI security and leveraging AI tools to advance security engineering.

Responsibilities

• Define security principles, standards, patterns, and guardrails for engineers to build securely at pace.
• Shape the strategic technical direction of Product Security across the platform and engineering organisation.
• Protect our platform with hands-on expertise across APIs, microservices, AWS, authentication, authorization, and software supply chain security.
• Identify and mitigate emerging security risks, including those from AI, and communicate impact to senior stakeholders.
• Measure security posture with meaningful Product Security metrics and drive continuous improvements.

Skills

Product Security

Application Security

Security Architecture

Threat Modelling

AI Security

Security Automation

Tools

AWS Security

Job description

Storio group in London seeks a Principal Product Security Engineer to shape security across our ecommerce platform and engineering organisation. This senior IC role collaborates with engineers, architects and product teams to embed secure-by-design engineering as standard practice.

You will define security principles, lead threat modelling, and guide security across APIs, cloud infrastructure (AWS) and software supply chains, while driving AI security initiatives and measurable security posture