Senior Product Security Engineer

Accountabilities:: Architect and implement security controls for AI/ML systems, including model training, data pipelines, inference environments, and agentic workflows. Identify and mitigate AI-specific threats such as prompt injection, data poisoning, model inversion, and model theft. Establish controls for model provenance, integrity, auditability, and responsible AI security practices. Align AI security initiatives with governance and compliance frameworks such as NIST AI RMF and the EU AI Act. Embed security, privacy, and compliance requirements into application, cloud, software, and AI development lifecycles. Define and maintain secure development standards, architectural guidance, and security best practices. Lead threat modeling, secure design reviews, and risk assessments across the software development lifecycle. Build security automation and governance capabilities that integrate naturally into engineering workflows. Prepare customer-facing security assurance materials, including questionnaire responses, security whitepapers, and trust documentation. Represent product security in customer, leadership, and cross-functional discussions, helping communicate security requirements and risk decisions. Mentor engineering teams on secure coding, AI risk management, threat modeling, and secure design. Promote a security-first culture through documentation, training, advocacy, and continuous improvement. Requirements 5–7+ years of experience in product, application, or cloud security engineering. Strong knowledge of secure SDLC practices, threat modeling, and secure architecture design. Ability to read and review code to support security assessments, threat models, and architectural reviews. Experience securing AI/ML pipelines, data workflows, and model-serving infrastructure, with practical knowledge of LLM and AI security risks such as prompt injection, model integrity, and provenance. Strong understanding of cloud security principles and best practices across multi-cloud environments. Familiarity with DevSecOps practices and CI/CD environments. Knowledge of encryption fundamentals, including symmetric and asymmetric cryptography, TLS/mTLS, key management, and secrets handling. Understanding of modern authentication and authorization patterns, including OAuth 2.0, OIDC, SAML, RBAC, and ABAC. Demonstrated ability to lead cross-functional security initiatives and collaborate with engineering, product, and compliance teams. Strong communication, stakeholder management, analytical thinking, and influencing skills. Experience with Python, Java, and/or JavaScript for security automation and tooling is an advantage. Experience with Kubernetes and container security, software supply chain security, artifact integrity, or bug bounty programs is a plus. Familiarity with security and compliance frameworks such as SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF is desirable. Certifications such as CKS, CISSP, CSSLP, or AI/ML security credentials are considered a plus. Benefits Base compensation range of £90,000–£122,000 GBP. Potential performance-based bonus and equity. Generous benefits program. Opportunity to work on advanced AI/ML security, cloud security, secure architecture, and product security challenges. Ability to shape and influence product security strategy and security-by-design practices. Collaboration with engineering, architecture, product, compliance, and customer-facing teams. Opportunities to mentor teams and contribute to security culture, standards, and training. Career growth within a fast-moving technology environment. Commitment to an inclusive workplace and reasonable accommodations for qualified employees with disabilities.