Senior Product Security Engineer: Threat Modelling

Primer; Polska; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Fully remote

Competitive share options

Uncapped holiday

Co-working space access

Workations & Company Retreat

Home office stipend £500

Learning budget

Private Medical Insurance

Job summary

Primer is hiring a ProdSec/AppSec engineer to shape the security surface for a payments-scale product. You will be the second engineer in this function, owning projects end to end, embedding with engineering teams, and helping set strategy and architecture.

You’ll review features, build automation, and drive security initiatives across Cloud, Infra, and product, with room to grow alongside a senior mentor.

Qualifications

• Experience with security reviews or threat modelling to identify meaningful risks.
• Ability to read and write code and build small automation tools.
• Strong judgment balancing real vs theoretical threats with clear reasoning.
• Ability to plan and deliver work independently with limited supervision.
• Clear communication with engineers who are not security specialists.
• Exposure to compliance frameworks like SOC2 or PCI is a plus.

Responsibilities

• Run security reviews and threat modelling across Primer's product.
• Plan and deliver your own security projects end to end.
• Build tooling and automation to speed future reviews.
• Coordinate penetration testing and track remediation to closure.
• Support SOC2/PCI compliance evidence collection and remediation.
• Contribute to AppSec roadmap including AI security and supply chain topics.
• Tackle proactive research and hands‑on investigations with limited capacity.
• Collaborate with Cloud, Infra, and GRC on security aspects.

Skills

Security reviews

Threat modelling

Code reading

Automation tooling

Risk assessment

Independent delivery

Engineer communication

Job description

Primer is hiring a ProdSec/AppSec engineer to shape the security surface for a payments-scale product. You will be the second engineer in this function, owning projects end to end, embedding with engineering teams, and helping set strategy and architecture.

You’ll review features, build automation, and drive security initiatives across Cloud, Infra, and product, with room to grow alongside a senior mentor.