Senior Product Security Engineer - Secure SDLC & IoT

Sonos, Inc.; Glasgow; On-site; GBP 70,000 - 90,000; Full time

Job summary

Sonos, Inc. in Glasgow is looking for a Senior Product Security Engineer to enhance product security practices. You will own the execution layer of product security, ensuring consistent and measurable practices across cloud, mobile, and embedded environments. The ideal candidate will have over 4 years of relevant experience and a strong background in security tooling integration.

The position directly impacts Sonos' ability to meet regulatory requirements and enhances the entire engineering team's security confidence.

Qualifications

• 4+ years of experience in software engineering, application security, or product security.
• Experience working directly with engineering teams in software development environments.
• Experience working with IoT products, connected devices, or embedded systems preferred.

Responsibilities

• Own the execution layer of product security across cloud, mobile, and embedded engineering.
• Deploy and operationalize security tooling in engineering workflows.
• Support vulnerability intake, triage, and coordinated disclosure processes.

Skills

Experience integrating security practices and tooling into CI/CD pipelines.

Experience scoping or coordinating penetration testing engagements.

4+ years in software engineering, application security, or product security

Hands-on experience implementing and operationalizing security tooling

Using AI tools to automate security practices

Tools

SAST

SCA

DAST

Secrets scanning

Job description

Sonos, Inc. in Glasgow is looking for a Senior Product Security Engineer to enhance product security practices. You will own the execution layer of product security, ensuring consistent and measurable practices across cloud, mobile, and embedded environments. The ideal candidate will have over 4 years of relevant experience and a strong background in security tooling integration.

The position directly impacts Sonos' ability to meet regulatory requirements and enhances the entire engineering team's security confidence.