Senior Product Security Engineer: Threat Modeling & Red Team

Auth21; Cambridge; On-site; GBP 90,000 - 120,000; Full time

Job summary

Altium Limited seeks a Senior Product Security Engineer to extend our security capability with a focus on continuous vulnerability discovery and prevention. The role aims to keep existing functionality secure and to uncover real vulnerabilities before customers do.

You will lead threat modeling, perform offensive testing, and ensure security is integrated throughout the CI/CD pipeline, driving secure-by-design practices across engineering teams.

Qualifications

• 5+ years in Application or Product Security
• Bachelor's degree or equivalent
• Hands-on web app security testing and API security
• Strong knowledge of OWASP Top 10
• Experience with CI/CD security integration

Responsibilities

• Design and maintain security regression test suites for critical flows.
• Lead structured threat modeling sessions for existing and new features.
• Perform manual and automated security testing simulating real attacker behavior.
• Continuously assess the platform against OWASP Top 10 categories and go beyond tooling.
• Review new features for security risks and ensure threat modeling and regression coverage.

Skills

Web app security testing

API security

Threat modeling

CI/CD security integration

Penetration testing

Authentication & sessions

Education

Bachelor's Degree or equivalent

Job description

Altium Limited seeks a Senior Product Security Engineer to extend our security capability with a focus on continuous vulnerability discovery and prevention. The role aims to keep existing functionality secure and to uncover real vulnerabilities before customers do.

You will lead threat modeling, perform offensive testing, and ensure security is integrated throughout the CI/CD pipeline, driving secure-by-design practices across engineering teams.