Senior Product Security Engineer - Secure by Design Expert

United States Digital Space LLC; Greater London; Hybrid; GBP 90,000 - 100,000; Full time

Benefits offered by this job

Private healthcare

Dental insurance

Work from abroad policy

EV scheme

Share purchase plan

Festive time off

Family-friendly benefits

Job summary

the company in the United Kingdom is seeking a Senior Product Security Engineer to own product security across the development lifecycle. You will partner with SRE and Platform Engineering to embed the latest tools and best practices, acting as a bridge between security, engineering and the business.

You will drive security governance, code reviews, SAST/DAST, and third‑party testing, while strengthening mobile app and API security and automating protective measures across CI/CD and cloud

Qualifications

• Extensive experience identifying, assessing and mitigating security risks across design, code and deployment.
• Ability to shape and deliver a product security roadmap and measure progress with metrics.
• Proven track record securing mobile apps and APIs with modern auth methods.

Responsibilities

• Define and own the product security roadmap aligned with business goals, guiding engineering leadership.
• Lead vulnerability management from triage to remediation with MTTR metrics.
• Perform threat modelling for web, mobile and API services and implement countermeasures.
• Oversee code reviews, SAST/DAST and third‑party pentests with remediation tracking.
• Strengthen iOS/Android app security and API protections including auth and data storage.
• Automate security tooling and embed security into CI/CD pipelines across cloud/native environments.
• Mentor teams and grow a security champions programme and secure coding culture.

Skills

Threat modelling

Vulnerability management

Application security

Security testing (SAST/DAST)

OAuth 2.0 & OpenID Connect

CI/CD security

Secure coding practices

Security champions program

Regulatory compliance

Tools

SAST tools

DAST tools

Vulnerability scanning tools

Penetration testing tools

CI/CD tooling

Job description

the company in the United Kingdom is seeking a Senior Product Security Engineer to own product security across the development lifecycle. You will partner with SRE and Platform Engineering to embed the latest tools and best practices, acting as a bridge between security, engineering and the business.

You will drive security governance, code reviews, SAST/DAST, and third‑party testing, while strengthening mobile app and API security and automating protective measures across CI/CD and cloud