Staff Software Engineer - Security

present of AI; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Job summary

Flow Engineering is seeking a senior security engineer to define and own the security agenda for AI-enabled products. You will lead threat modeling, secure design, cloud hardening, tenant isolation, data protection, and incident response across our AI platform and its services.

You will also secure LLM and agentic systems, guard against prompt injection and data leakage, and help determine guardrails and action limits.

Qualifications

• Experience in threat modeling, secure design, cloud and application hardening, tenant isolation, data protection, and incident response.
• Production engineering background and experience running secure cloud services at scale.
• Experience carrying a company through SOC 2 in a regulated setting.
• Familiarity with security reviews touching TypeScript/Python services.

Responsibilities

• Lead threat modeling and secure design across AI and cloud services.
• Ensure data protection, tenant isolation, and incident response readiness.
• Drive SOC 2 readiness and compliance in regulated environments.
• Secure LLM and agent workflows, guarding against prompt injection and data leakage.

Skills

Threat modeling

Cloud security

SOC 2

Securing LLM systems

Security reviews

TypeScript

Python

Tools

TypeScript

Python

Job description

This is the first dedicated security role, so the person must set the security agenda from scratch rather than follow an existing program. The work spans threat modeling, secure design, cloud and application hardening, tenant isolation, data protection, and building detection and incident response. A strong candidate has years of production engineering behind them, has run secure cloud services at scale, and has personally carried a company through SOC 2 in a regulated setting.

How it fits the AI era

Large language models and agent workflows sit at the center of the product, so the role includes securing those systems: guarding against prompt injection, stopping data from leaking through models, and deciding what actions agents may take. The security fundamentals of identity, secrets, network, and data protection stay human owned and do not change. What shifts is that the threat model now includes model behavior and agent permissions, and the tooling around detection and monitoring has to keep pace with fast prototyping.

How it builds AI experience

The role offers direct work on securing LLM and agentic systems, from guardrails to action limits, which is still uncommon hands on experience. Building it means learning how prompt injection and model data leakage actually play out, and pairing that with the compliance side the company needs for defense and aerospace customers. Familiarity with the company's TypeScript, Python, and LLM orchestration stack would help, since security reviews touch those services.

Worth showing

• Threat modeling
• Cloud security AWS GCP Azure
• SOC 2 implementation
• Securing LLM systems

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

About Flow Engineering

Per the company, Flow Engineering provides requirements management and AI agents for hardware engineering teams.