Senior Security Engineer

About the role

You’ll join the ProdSec/AppSec team to build the product security surface for a fast‑growing payments platform. This hands‑on, delivery‑focused role lets you set security strategy, own architecture, and work closely with Cloud, Infra and product engineering teams.

Key responsibilities

• Run security reviews and threat modelling on features and systems, turning findings into actionable guidance.
• Plan and deliver independent security projects from design through rollout.
• Build tooling and automation to make future reviews faster and cheaper.
• Coordinate penetration testing and track remediation to closure.
• Support recurring compliance work (SOC2, PCI) including evidence collection.
• Contribute to the AppSec roadmap on application threats, AI security, supply‑chain security, and ASPM.
• Conduct proactive security research, investigations and threat hunting.
• Collaborate with Cloud, Infra and GRC on security aspects of their projects.

Required profile

• Proven experience in product or application security, including security reviews and threat modelling.
• Ability to read and write code and build small automation tools.
• Sound judgement about risk and clear communication with non‑security engineers.
• Self‑directed work planning and delivery while knowing when to involve senior engineers.
• Interest or exposure to compliance frameworks (SOC2, PCI) and regulated domains such as fintech.

Required skills

• Threat modelling
• Security reviews
• Penetration testing coordination
• Automation tooling
• Compliance frameworks (SOC2, PCI)

What we offer

• Fully remote, globally distributed work environment.
• Competitive share options.
• Uncapped holiday with a minimum of 25 days.
• Co‑working space access in major cities and workations.
• Best‑in‑class equipment and £500 home‑office budget.
• Generous learning budget and private medical insurance.