Senior Product Security Engineer

Overview

Senior Product Security Engineer responsible for securing software delivery pipelines and cloud-native products. The Staff-level individual contributor provides technical leadership, cross-team influence, and ownership of complex security problems.

What you'll do

• Build and maintain secure CI/CD pipelines with preventative security gates.
• Capture product risk exposure systematically and automatically.
• Implement software supply chain controls, including signed artifacts, SBOMs, and provenance attestations.
• Lead security architecture reviews and threat models for Kubernetes workloads.
• Harden container images, Kubernetes configurations, and cloud IAM postures.
• Drive adoption of pod security, network policy, workload identity, and secrets management standards.

What you'll need

• 7+ years of software engineering or security engineering experience.
• Proficiency in Go or Python for production-quality code.
• Hands-on production Kubernetes experience, including cluster hardening, RBAC, network policies, and admission controllers.
• Practical GCP and/or AWS experience with IAM, workload identity, and secrets management.
• Experience designing and securing CI/CD pipelines.
• Experience with container security and software supply chain security frameworks.
• Understanding of OWASP, NIST, and cloud security frameworks.

Nice to have

• Familiarity with minimal or hardened container base image ecosystems.
• Experience with policy-as-code tools such as OPA, Kyverno, or Conftest.
• Contributions to open source security projects.
• Security research or offensive security experience.

Details

• Remote role in the United Kingdom.
• Staff-level individual contributor position.