Senior Security Engineer — Product & Infrastructure Defense

Pigment; Greater London; Hybrid; GBP 69,000 - 103,000; Full time

Benefits offered by this job

Stock options

Health insurance (Alan Blue)

Lunch vouchers

Gym access

Learning stipend

Remote work stipend

Annual offsite

High-end equipment

Job summary

Pigment is seeking a hands-on Security Engineer to own the security roadmap for its product, infrastructure and CI/CD environment. You’ll read code, model threats, triage vulnerabilities and build automation with the team.

You’ll work across application and infrastructure security, detection, and assurance, partnering with engineers and SREs to keep certifications current while pushing security depth and velocity.

Qualifications

• 8+ years of security experience in security engineering, pentesting or consulting.
• Own a security roadmap end-to-end and drive work through engineering teams.
• Hands-on across development, databases, networking and web security.
• Fluent in English; French is a strong plus.

Responsibilities

• Design security features in the product and strengthen defence-in-depth.
• Review code, architecture and configuration; advise early governance.
• Lead assurance programme: code reviews, architecture reviews, bug bounty.
• Own vulnerability management from detection to verified fix.
• Build and improve detection capabilities with infra and engineering teams.
• Lead incident response across production end-to-end.
• Set SDLC security direction for engineers and product teams.

Skills

Security engineering

Threat modelling

Vulnerability management

Incident response

Penetration testing

CI/CD security

English fluency

Cloud security (GCP)

Tools

Okta

OAuth

JWT

GCP

Terraform

Kubernetes

Vault

Datadog

Job description

Pigment is seeking a hands-on Security Engineer to own the security roadmap for its product, infrastructure and CI/CD environment. You’ll read code, model threats, triage vulnerabilities and build automation with the team.

You’ll work across application and infrastructure security, detection, and assurance, partnering with engineers and SREs to keep certifications current while pushing security depth and velocity.