Senior Product Security Engineer: Secure-by-Design & Scaleup

Dojo; Greater London; On-site; GBP 80,000 - 110,000; Full time

Job summary

Dojo is hiring a Product Security Engineer to strengthen the security of our payments platform and guide secure-by-design practices across product development. You will partner with engineering to balance risk with business goals and shape next-generation solutions as we scale.

The role emphasizes threat modelling, SDLC, DevSecOps, and cloud security (GCP/AWS) with Kubernetes; join an office-first, fast-growing environment where collaboration and impact matter.

Qualifications

• Proven experience in Cyber Security, Application Security, or Secure Software Development.
• Strong understanding of the Secure Development Lifecycle (SDLC), DevSecOps best practices, and CI/CD security tooling.
• Demonstrated experience conducting threat modelling, security architecture reviews, and risk assessments.
• Familiarity with cloud security (GCP/AWS), Kubernetes environments, and penetration testing or vulnerability management.

Responsibilities

• Collaborate closely with software engineers to integrate and enhance security practices throughout the product lifecycle.
• Establish defence-in-depth security requirements that align with our technology strategy and business objectives.
• Conduct architecture reviews and threat modelling across cloud and containerised environments.
• Risk-assess and prioritise findings from reviews, penetration testing, and AppSec/CSPM tooling, delivering actionable remediation guidance.

Skills

Cyber Security

Application Security

DevSecOps

Threat Modelling

Tools

GCP/AWS

Kubernetes

CI/CD Security Tools

Job description

Dojo is hiring a Product Security Engineer to strengthen the security of our payments platform and guide secure-by-design practices across product development. You will partner with engineering to balance risk with business goals and shape next-generation solutions as we scale.

The role emphasizes threat modelling, SDLC, DevSecOps, and cloud security (GCP/AWS) with Kubernetes; join an office-first, fast-growing environment where collaboration and impact matter.