Staff Product Security Engineer — Remote & DevSecOps Leader

Doxy.me Inc.; Greater London; Hybrid; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Unlimited PTO

Private medical & dental healthcare (A

5% matched pension

Remote-first with monthly London meet‑

Equipment allowance

Job summary

Doxy.me Inc. in the UK is seeking a Staff Product Security Engineer to lead security across our product engineering teams, shaping secure SDLC and guardrails to protect our telemedicine platform.

You will drive threat modeling, design secure-by-default CI/CD pipelines, and collaborate with Product and Engineering to embed SOC2/ISO/HIPAA compliance and strong privacy practices across the stack.

Join a remote-first team with a London hub for quarterly in-person collaboration.

Qualifications

• Bachelor's degree in computer science, programming, or related field or equivalent experience.
• Experience working with remote, globally distributed teams.
• Experience with software and/or managed infrastructure services.
• Experience with AWS, Azure, or GCP.
• Kubernetes and container infrastructure experience.
• IAC solutions like Terraform and Helm.
• CI/CD experience.
• Security testing tools (SAST/DAST).
• Strong knowledge of OWASP Top 10 and web security testing.
• Secure coding practices for SOC2, ISO, HIPAA, HITRUST, etc.
• Able to give/receive feedback and educate others on security.

Responsibilities

• Provide security leadership and guidance within product engineering teams through threat modeling and education.
• Coordinate security requirements and standards across the product life cycle, managing vulnerabilities and risk controls.
• Contribute to DevSecOps strategy by designing secure-by-default CI/CD pipelines and processes.
• Develop engineering reference implementations of security patterns and guardrails.
• Liaise with Product and Engineering to include functional security specs for compliance.
• Track trends and risks, prioritise remediation of application flaws.

Skills

Threat modeling

Security leadership

Security education

Security monitoring

Remote collaboration

Communication

Education

Bachelor's degree in CS or related field

Tools

AWS

Kubernetes

Terraform

Helm

CI/CD

Static code analysis

DAST

Job description

Doxy.me Inc. in the UK is seeking a Staff Product Security Engineer to lead security across our product engineering teams, shaping secure SDLC and guardrails to protect our telemedicine platform.

You will drive threat modeling, design secure-by-default CI/CD pipelines, and collaborate with Product and Engineering to embed SOC2/ISO/HIPAA compliance and strong privacy practices across the stack.

Join a remote-first team with a London hub for quarterly in-person collaboration.