Security Engineer

Product Security Engineer (Not Just Alerts)

Location:
London

I'm partnered with a highly technical, research-driven investment firm to hire a Product Security Engineer to embed security directly into engineering and infrastructure teams.

This isn’t a monitoring or alert-driven role. You’ll be helping teams design and ship systems safely from the start — working across cloud platforms, internal tooling and performance-critical applications where reliability genuinely matters.

You’ll sit close to engineers, reviewing how software is built, identifying realistic failure paths and helping introduce guardrails that don’t slow delivery. The focus is practical security — improving how systems are written, deployed and operated rather than policing them afterwards.

NO dashboards-only work!

• Embedding security into system architecture and engineering workflows
• Reviewing real production code across multiple languages
• Threat modelling and vulnerability analysis alongside developers
• Integrating SAST, DAST, and dependency scanning into CI/CD pipelines
• Improving secure development practices across teams
• And, more......

• 3–10 years in product security, application security or security-focused engineering
• Experience securing applications/products, not just detection or SOC environments
• Comfortable reading or writing code (Python, C++, Rust, Go or Java/Kotlin)
• Understanding of common software vulnerabilities and how they really happen
• Experience with Linux and/or Windows environments
  
  Familiarity with AWS or Azure
• Exposure to CI/CD pipelines and security tooling integration
• Someone pragmatic — able to balance security with delivery

Know someone ideal? We offer a market-leading referral scheme for successful introductions. T&Cs apply.