Software Security Engineer

Fortinet, Inc.; City Of London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Fortinet, Inc. is seeking a Software Security Engineer for the FortiDLP product based in Moorgate. You will promote security practices across the product, review architectures, and help maintain secure dependencies while collaborating with the Infosec team.

The role emphasizes threat modelling, secure coding, and vulnerability management within CI. A background in Golang and security tooling is preferred, with a collaborative, ownership-driven approach.

Qualifications

• Strong programming skills with 3–5 years of software engineering experience.
• Backend development concepts and CS fundamentals.
• Experience with Golang.
• Familiarity with security tooling and threat modelling.
• Some familiarity with Checkmarx/Trivy/Kics or similar tools, as well as DAST tooling.

Responsibilities

• Champion security throughout the FortiDLP product.
• Maintain up-to-date and vulnerability-free dependencies.
• Threat modelling, design and code review.
• Maintaining and tuning automatic vulnerability checks within CI systems.
• Triage findings of scanning tools and ensure prompt remediations.
• Liaising with the Fortinet Infosec team to ensure SOC 2 and ISO 27k certifications.

Skills

Golang

Threat modelling

Security concepts

Code reviews

Cross-functional collaboration

Tools

Checkmarx

Trivy

Kics

Job description

Job Description Software Security Engineer - Moorgate office based

Join Fortinet, a global cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to safeguard people, devices, and data everywhere. We are currently seeking an experienced Software Security Engineer to contribute to the success of our rapidly growing business.

The FortiDLP platform collects millions of data points per second. We protect people and data anywhere, and innovative companies worldwide use FortiDLP for human-centric data loss protection. Our users need a way to spot trends in this data, search for security breaches, and take effective action.

Secure development practices are at the heart of all Fortinet software engineering. It takes dedicated effort to maintain security as a culture across people and processes. The FortiDLP team is looking for a software engineer with a focus on promoting the highest level of security within the product.

Key Responsibilities and Technologies

• Championing security throughout the FortiDLP product.
• Help maintain up-to-date and vulnerability-free dependencies.
• Threat modelling, design and code review.
• Maintaining and tuning automatic vulnerability checks within Continuous Integration systems.
• Triage findings of scanning tools and ensure prompt remediations.
• Liaising with the Fortinet Infosec team to ensure compliance with SOC 2 and ISO 27k certifications.

Direct experience in these technologies is a bonus but not a requirement. We are looking for relevant experience in comparable technologies and frameworks, and the ability to learn new technologies. We value:

• Strong programming skills backed by at least 3-5 years of software engineering experience.
• Familiarity with computer science fundamentals and backend development concepts.
• Experience in Golang.
• Experience with threat modelling and security concepts.
• Some familiarity with Checkmarx/Trivy/Kics or similar tools, as well as DAST tooling in general.

Communication and Collaboration

We work on complex, cross-functional features that require close collaboration with engineers across the stack, product managers, technical writers, and support teams. Team members contribute throughout the development lifecycle - from writing technical specifications and coordinating implementation to demoing features internally, supporting launches, and ensuring our solutions are well-documented and maintainable. We also work closely with the support and QA teams to prepare for releases, debug early issues in the field, and ensure a smooth rollout experience. High engineering standards are central to our team culture, including thorough code reviews, rigorous testing, and shared responsibility for quality and reliability.

We're looking for engineers who communicate clearly, work well with a wide range of collaborators, and enjoy building shared understanding across disciplines. The role suits people who are thoughtful partners to product managers and support teams, value feedback as part of the development process, and bring a sense of ownership and care to both their code and their collaboration.

Why Join Us:

At Fortinet, we embrace diversity and inclusivity. We encourage applications from diverse backgrounds and identities. Explore our welcoming work environment designed for a rewarding career journey with an attractive Total Rewards package to support you with your overall health and financial well-being. Join us in bringing solutions that make a meaningful and lasting impact to our 660,000+ customers around the globe.

We will only notify shortlisted candidates.

Fortinet will not entertain any unsolicited resumes, please refrain from sending them to any Fortinet employees or Fortinet email aliases. Should any Agency submit any resumes to Fortinet these resumes, if considered, will be assumed to have been given by the Agency free of any related fees/charges.