615 Product Security Engineer jobs in the United Kingdom
Product Security Engineer (University Grad)
London, London
Meta
Posted 27 days ago
Job Viewed
Job Description
**Summary:**
Meta's Product Security team is seeking a passionate hacker who derives purpose in life by revealing potential weaknesses and then crafting creative solutions to eliminate those weaknesses. Your skills will be the foundation of security initiatives that protect the security and privacy of over three billion people. You will be relied upon to provide engineering and product teams with the web security expertise necessary to make confident product decisions. Come help us make life hard for the bad guys.
**Required Skills:**
Product Security Engineer (University Grad) Responsibilities:
1. Security Reviews: perform manual design and implementation reviews of products and services that make up the Meta ecosystem, like Instagram, WhatsApp, Oculus, Portal, and more
2. Developer Guidance: provide guidance and education to developers that help prevent the authoring of vulnerabilities
3. Automated Analysis and Secure Frameworks: build automation (static and dynamic analysis) and frameworks with software engineers that enable Meta to scale consistently across all of our products
4. Research, develop, and apply mitigations to products so that vulnerabilities cannot be turned into exploits
**Minimum Qualifications:**
Minimum Qualifications:
5. Currently has, or is in the process of obtaining a Bachelor's or Masters degree in Computer Science, Computer Engineering, relevant technical field, or equivalent practical experience. Degree must be completed prior to joining Meta
6. Experience finding vulnerabilities in php, javascript, python
7. Knowledge of secure code development
8. Experience with exploiting common web security vulnerabilities (e.g. SQLi, XSS, permission bypass vulnerabilities)
**Preferred Qualifications:**
Preferred Qualifications:
9. Track record of participation in capture the flag (CTF) competitions
10. Contributions to the security community (public research, blogging, presentations, bug bounty, etc.)
**Industry:** Internet
Meta's Product Security team is seeking a passionate hacker who derives purpose in life by revealing potential weaknesses and then crafting creative solutions to eliminate those weaknesses. Your skills will be the foundation of security initiatives that protect the security and privacy of over three billion people. You will be relied upon to provide engineering and product teams with the web security expertise necessary to make confident product decisions. Come help us make life hard for the bad guys.
**Required Skills:**
Product Security Engineer (University Grad) Responsibilities:
1. Security Reviews: perform manual design and implementation reviews of products and services that make up the Meta ecosystem, like Instagram, WhatsApp, Oculus, Portal, and more
2. Developer Guidance: provide guidance and education to developers that help prevent the authoring of vulnerabilities
3. Automated Analysis and Secure Frameworks: build automation (static and dynamic analysis) and frameworks with software engineers that enable Meta to scale consistently across all of our products
4. Research, develop, and apply mitigations to products so that vulnerabilities cannot be turned into exploits
**Minimum Qualifications:**
Minimum Qualifications:
5. Currently has, or is in the process of obtaining a Bachelor's or Masters degree in Computer Science, Computer Engineering, relevant technical field, or equivalent practical experience. Degree must be completed prior to joining Meta
6. Experience finding vulnerabilities in php, javascript, python
7. Knowledge of secure code development
8. Experience with exploiting common web security vulnerabilities (e.g. SQLi, XSS, permission bypass vulnerabilities)
**Preferred Qualifications:**
Preferred Qualifications:
9. Track record of participation in capture the flag (CTF) competitions
10. Contributions to the security community (public research, blogging, presentations, bug bounty, etc.)
**Industry:** Internet
This advertiser has chosen not to accept applicants from your region.
0
Product Security Engineer - Engine by Starling
London, London
Starling Bank
Posted 23 days ago
Job Viewed
Job Description
At Engine by Starling , we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology.
Engine is Starling's software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and a year ago we split out as a separate business.
Starling Bank has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. This SaaS technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starling's success.
Our technologists are at the very heart of Engine and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together!
The way to thrive and shine within Engine is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, and discovering to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness.
Hybrid Working
We have a Hybrid approach to working here at Engine - our preference is that you're located within a commutable distance of our offices so that we're able to interact and collaborate in person.
About the role:
As a Product Security Engineer at Engine, you will be a technical strategist responsible for proactively identifying and mitigating security risks across our platform and products. Your primary mission is to ensure we build secure systems by providing expert security analysis, architectural guidance, and process leadership. You will lead threat modelling sessions, conduct in-depth security reviews of new features, manage our penetration testing programme, and triage complex findings. This role requires a deep understanding of technology and attack vectors, combined with the ability to think strategically and communicate complex risks to both technical and non-technical stakeholders.
Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be. Hear from the team in our latest Blog or our case studies with Women in Tech .
We are looking for an experienced Product Security Engineer to join our growing Security Engineering team, working closely with the GRC team and the various Engine Technology teams to make sure security is at the heart of all our technical processes. Your place within the team will depend on your individual strengths and interests.
This role will cover a wide array of security areas across our multi-tenant SaaS cloud environments and internal infrastructure and will require a skilled individual to spearhead efforts in fortifying both infrastructure and application platforms, against potential threats.
What you’ll get to do?
- Conduct comprehensive security architecture and design reviews, ensuring that security is embedded from the start
- Lead the threat modelling process (e.g., using STRIDE) for new products and features, identifying potential design flaws and defining security requirements
- Manage the end-to-end penetration testing lifecycle, from scoping engagements with technical teams to triaging, validating, and driving the remediation of findings
- Analyse and interpret results from security tools (SAST, DAST, vulnerability scanners) to prioritise and address the most critical risks
- Act as a key security advisor to engineering teams, providing expert guidance on security best practices, vulnerability mitigation, and secure design patterns
- Translate regulatory requirements (PCI DSS, SOC 2, ISO 27001) into concrete technical controls and implementation plans in collaboration with the GRC team
- Lead incident response efforts, including investigation and remediation of security breaches
- Support our internal security awareness and training programs and advocating the DevSecOps mindset that we have created across our technology teams
Requirements
What skills are essential:
- Significant experience in a security-focused role with a strong emphasis on risk analysis, threat detection, and architectural review
- Proven expertise in conducting threat modelling and security design reviews for complex, cloud-native applications (AWS/GCP, Kubernetes)
- Deep understanding of common application and infrastructure vulnerabilities (OWASP Top 10, MITRE ATT&CK) and their mitigation
- Experience managing penetration testing engagements and working with development teams on remediation
- Mature understanding and experience with cloud security architecture (AWS, Google Cloud)
- The ability to read and understand code (e.g., Go, Python) and Infrastructure-as-Code (Terraform) to effectively analyse security risks
- The ability to document security requirements from various stakeholders
- A practical understanding of how to integrate security into the software development lifecycle
- Excellent communication skills, with the ability to articulate complex technical risks to diverse audiences
- A thorough understanding of the incident response process and the principles of Zero Trust architecture
- A proactive approach to staying updated with the latest security threats, vulnerabilities, and mitigation techniques
What skills are desirable, but not essential:
- Hands-on experience helping a company achieve and maintain compliance with frameworks like SOC 2, ISO 27001, or PCI DSS
- Experience in automating security controls and compliance checks against standards and frameworks which include SOC 2, ISO 27001, PCI DSS/3DS
- Experience performing secure code reviews and using SAST/DAST tools for security approvals
- Expertise in Kubernetes, securing clusters and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus)
- Container security knowledge including container image provenance (e.g. Sigstore, Notary) with an in-depth knowledge of container runtimes
- Strong understanding of network protocols & practices, firewalls, intrusion detection/prevention systems and WAFs
- Understanding of integrating security into the software development lifecycle
- Experience performing secure code reviews and security approvals including the use of static and dynamic application security testing (SAST/DAST) tools
- Experience in Cryptography management & enhancements
- Experience configuring and utilising cloud-native security logging, monitoring, and detection services
- Experience with Infrastructure as Code and infrastructure provisioning tools (Cloudformation, Terraform) for analysis and review
- Scripting and programming skills (e.g., Python, Go) for creating proof-of-concepts or small scripts to validate findings
- Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialist or GCP Professional Cloud Security Engineer
Our Interview process
Interviewing is a two way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team:
- Initial interview with our Staff Security Engineer - ~45 minutes
- Take home technical task to be discussed in the next interview
- Technical interview with some of our Security and Information Security team members - ~1.5 hours
- Final interview with our CTO / deputy CTO ~45 minutes
Benefits
- 33 days holiday (including public holidays, which you can take when it works best for you)
- An extra day’s holiday for your birthday
- Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
- 16 hours paid volunteering time a year
- Salary sacrifice, company enhanced pension scheme
- Life insurance at 4x your salary & group income protection
- Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton
- Generous family-friendly policies
- Incentives refer a friend scheme
- Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
- Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing
About Us
You may be put off applying for a role because you don't tick every box. Forget that! While we can’t accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren’t sure if you're 100% there yet, get in touch anyway. We’re on a mission to radically reshape banking – and that starts with our brilliant team. Whatever came before, we’re proud to bring together people of all backgrounds and experiences who love working together to solve problems.
Engine by Starling is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Engine by Starling are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.
When you provide us with this information, you are doing so at your own consent, with full knowledge that we will process this personal data in accordance with our Privacy Notice. By submitting your application, you agree that Engine by Starling and Starling Bank will collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we will process, where we will process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.
This advertiser has chosen not to accept applicants from your region.
1
Software Security Engineer
Oxford, South East
Robert Half
Posted 13 days ago
Job Viewed
Job Description
Working with a scaling business in Oxford to recruit a permanent Software Security Engineer to join the Information Security team. This is a newly created role working across software engineering, modelling and data science teams. This is a role to enable the business to improve their SDLC processes through creating robust and resilient security operations.
This is a permanent role with hybrid wor.
This advertiser has chosen not to accept applicants from your region.
2
Senior Security Software Engineer
London, London
UnitedHealth Group
Posted 24 days ago
Job Viewed
Job Description
Optum is a global organisation that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start **Caring. Connecting. Growing together.**
A Security Logging Engineer partners with ESRO Cyber Defense Teams to build, customize and distribute Security Log Solutions for on-prem and in the cloud systems. Work alongside the top Google SecOps engineers in the company to ensure our pipelines feeding SecOps are as efficient, reliable and cost effective as possible. ESRO Security Logging Team and ESRO Cyber-Defense teams both utilize the same workload software which produces a seamless workflow, a quicker time-to-deliver, and partnerships that offer focused value. We work with platform owners across the enterprise to provide support and education around the security events their platforms produce. We deliver world-class event pipelines tailored for each owner's platform.
_Careers with Optum offer flexible work arrangements and individuals who live and work in the Republic of Ireland will have the opportunity to split their monthly work hours between our London office_ _and telecommuting from a home-based office in a hybrid work model._
**Primary Responsibilities:**
+ Design & develop log solutions technologies with a key focus on Google SecOps, BindPlane, Beats, LogStash and Kafka
+ Build, design and develop new Log Collection systems for on-prem and cloud environments, AWS, Azure & GCP
+ Build and support pipeline monitoring and alerting tools like GCP Monitoring and ECE Monitoring as needed
+ Respond and troubleshoot platform alerts and high priority incidents and on-call alert pages
+ Facilitation of Change Requests (pipeline deployments, upgrades, breakfixes etc.)
+ Create a training plan to enhance your understanding of cloud key focus technologies like Terraform and AWS Lambda serverless computing as well as other key cloud technologies for AWS, Azure and GCP
_You will be rewarded and recognised for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role, as well as providing development for other roles you may be interested in_
**Required Qualifications:**
+ Bachelor's in Computer Science or similar. or equivalent experience
+ Proven experience working within log collection setup and development
+ Proven experience with RHEL Linux Server OS
+ Experience working with Google SecOps basic search queries
+ Experience with BindPlane, LogStash, Kafka, and GitHub Operations
+ Proficiency in Scripting/Programming with Python and Go
**Preferred Qualifications:**
+ Proven ability to work on high and low-level designing
+ Experience with Cloud Solution designs and setup for AWS, GCP and Azure
+ Excellent understanding of Amazon Kinesis Data Streams
+ Advanced Experience with RHEL Linux OS Commands
+ Advanced Experience with Go & Python Scripting/Programming
**Soft Skills:**
+ Proven good communications skills
+ Proven good problem-solving attitude
+ Proven ability to work independently or as a team
**Please note you must currently be eligible to work and remain indefinitely without any restrictions in the country to which you are making an application. Proof will be required to support your application.**
_All telecommuters will be required to adhere to the UnitedHealth Group's Telecommuter Policy._
_At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically_ _marginalised_ _groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission._
_Diversity creates a healthier atmosphere: UnitedHealth Group is an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, sexual orientation, or any other characteristic protected by law. UnitedHealth Group is a drug-free workplace. © 2025 UnitedHealth Group. All rights reserved._
#RPO #BBMEMEA
A Security Logging Engineer partners with ESRO Cyber Defense Teams to build, customize and distribute Security Log Solutions for on-prem and in the cloud systems. Work alongside the top Google SecOps engineers in the company to ensure our pipelines feeding SecOps are as efficient, reliable and cost effective as possible. ESRO Security Logging Team and ESRO Cyber-Defense teams both utilize the same workload software which produces a seamless workflow, a quicker time-to-deliver, and partnerships that offer focused value. We work with platform owners across the enterprise to provide support and education around the security events their platforms produce. We deliver world-class event pipelines tailored for each owner's platform.
_Careers with Optum offer flexible work arrangements and individuals who live and work in the Republic of Ireland will have the opportunity to split their monthly work hours between our London office_ _and telecommuting from a home-based office in a hybrid work model._
**Primary Responsibilities:**
+ Design & develop log solutions technologies with a key focus on Google SecOps, BindPlane, Beats, LogStash and Kafka
+ Build, design and develop new Log Collection systems for on-prem and cloud environments, AWS, Azure & GCP
+ Build and support pipeline monitoring and alerting tools like GCP Monitoring and ECE Monitoring as needed
+ Respond and troubleshoot platform alerts and high priority incidents and on-call alert pages
+ Facilitation of Change Requests (pipeline deployments, upgrades, breakfixes etc.)
+ Create a training plan to enhance your understanding of cloud key focus technologies like Terraform and AWS Lambda serverless computing as well as other key cloud technologies for AWS, Azure and GCP
_You will be rewarded and recognised for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role, as well as providing development for other roles you may be interested in_
**Required Qualifications:**
+ Bachelor's in Computer Science or similar. or equivalent experience
+ Proven experience working within log collection setup and development
+ Proven experience with RHEL Linux Server OS
+ Experience working with Google SecOps basic search queries
+ Experience with BindPlane, LogStash, Kafka, and GitHub Operations
+ Proficiency in Scripting/Programming with Python and Go
**Preferred Qualifications:**
+ Proven ability to work on high and low-level designing
+ Experience with Cloud Solution designs and setup for AWS, GCP and Azure
+ Excellent understanding of Amazon Kinesis Data Streams
+ Advanced Experience with RHEL Linux OS Commands
+ Advanced Experience with Go & Python Scripting/Programming
**Soft Skills:**
+ Proven good communications skills
+ Proven good problem-solving attitude
+ Proven ability to work independently or as a team
**Please note you must currently be eligible to work and remain indefinitely without any restrictions in the country to which you are making an application. Proof will be required to support your application.**
_All telecommuters will be required to adhere to the UnitedHealth Group's Telecommuter Policy._
_At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically_ _marginalised_ _groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission._
_Diversity creates a healthier atmosphere: UnitedHealth Group is an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, sexual orientation, or any other characteristic protected by law. UnitedHealth Group is a drug-free workplace. © 2025 UnitedHealth Group. All rights reserved._
#RPO #BBMEMEA
This advertiser has chosen not to accept applicants from your region.
3
Sr. Software Engineer - Cloud & Security
Concentrix
Posted 27 days ago
Job Viewed
Job Description
Job Title:
Sr. Software Engineer - Cloud & Security
Job Description
We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.
The global technology and services leader that powers the world's best brands, today and into the future. We're solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we're the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.
The Concentrix Catalyst team is the driving force behind Concentrix's transformation, data, and technology services. We integrate world-class digital engineering, creativity, and a deep understanding of human behavior to find and unlock value through tech-powered and intelligence-fueled experiences. We combine human-centered design, powerful data, and strong tech to accelerate transformation at scale. You will be surrounded by the best in the world providing market leading technology and insights to modernize and simplify the customer experience. Within our professional services team, you will deliver strategic consulting, design, advisory services, market research, and contact center analytics that deliver insights to improve outcomes and value for our clients. Hence achieving our vision.
Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we're proud to be recognized with awards such as "World's Best Workplaces," "Best Companies for Career Growth," and "Best Company Culture," year after year.
Join us and be part of this journey towards greater opportunities and brighter futures.
**Your day-to-day**
We work in a hybrid formation, attending the office on Monday, Tuesday and Thursday with the option to work from home or office on Wednesday and Friday. The successful candidate will make significant contributions to our cloud modernisation project.
+ Assume the role of a key Software Engineer on a team working on the leading Email Security product on the market
+ Play a vital role in the delivery of ambitious new features and products from Engineering through to Production
+ Collaborate with Engineering and Product Management resources to analyze and refine requirements
+ Help resolving critical customer escalations
**What you bring to the team**
+ Self-motivated and can work independently, while also being able to partner closely with other engineers on a project
+ Passionate about building quality products and want to own development end-to-end, leading with the right design, and follow principles to deliver maintainable, performant and a predictable experience
+ Enjoy problem solving and challenging yourself, but you are not afraid to reach out when you need help
+ Experience in working collaboratively with Product Management, QA and Operations teams
+ Excellent communication & interpersonal skills
**Technical Skills**
**Essential:**
+ Solid programming experience, ideally in Java
+ Experience of containerized applications, preferably using Kubernetes or similar orchestration tools
+ Experience with CI/CD Pipelines, microservices and distributed systems
+ Understanding of modern cloud infrastructure - ideally AWS/Azure
**Desirable**
+ Familiarity with infrastructure-as-code tools such as Terraform
+ Experience with OpenLDAP
+ Experience in Perl Development
Location:
UK, Work at Home, Northern Ireland
Language Requirements:
Time Type:
Full time
**If you are a California resident, by submitting your information, you acknowledge that you have read and have access to the Job Applicant Privacy Notice for California Residents (
Sr. Software Engineer - Cloud & Security
Job Description
We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.
The global technology and services leader that powers the world's best brands, today and into the future. We're solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we're the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.
The Concentrix Catalyst team is the driving force behind Concentrix's transformation, data, and technology services. We integrate world-class digital engineering, creativity, and a deep understanding of human behavior to find and unlock value through tech-powered and intelligence-fueled experiences. We combine human-centered design, powerful data, and strong tech to accelerate transformation at scale. You will be surrounded by the best in the world providing market leading technology and insights to modernize and simplify the customer experience. Within our professional services team, you will deliver strategic consulting, design, advisory services, market research, and contact center analytics that deliver insights to improve outcomes and value for our clients. Hence achieving our vision.
Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we're proud to be recognized with awards such as "World's Best Workplaces," "Best Companies for Career Growth," and "Best Company Culture," year after year.
Join us and be part of this journey towards greater opportunities and brighter futures.
**Your day-to-day**
We work in a hybrid formation, attending the office on Monday, Tuesday and Thursday with the option to work from home or office on Wednesday and Friday. The successful candidate will make significant contributions to our cloud modernisation project.
+ Assume the role of a key Software Engineer on a team working on the leading Email Security product on the market
+ Play a vital role in the delivery of ambitious new features and products from Engineering through to Production
+ Collaborate with Engineering and Product Management resources to analyze and refine requirements
+ Help resolving critical customer escalations
**What you bring to the team**
+ Self-motivated and can work independently, while also being able to partner closely with other engineers on a project
+ Passionate about building quality products and want to own development end-to-end, leading with the right design, and follow principles to deliver maintainable, performant and a predictable experience
+ Enjoy problem solving and challenging yourself, but you are not afraid to reach out when you need help
+ Experience in working collaboratively with Product Management, QA and Operations teams
+ Excellent communication & interpersonal skills
**Technical Skills**
**Essential:**
+ Solid programming experience, ideally in Java
+ Experience of containerized applications, preferably using Kubernetes or similar orchestration tools
+ Experience with CI/CD Pipelines, microservices and distributed systems
+ Understanding of modern cloud infrastructure - ideally AWS/Azure
**Desirable**
+ Familiarity with infrastructure-as-code tools such as Terraform
+ Experience with OpenLDAP
+ Experience in Perl Development
Location:
UK, Work at Home, Northern Ireland
Language Requirements:
Time Type:
Full time
**If you are a California resident, by submitting your information, you acknowledge that you have read and have access to the Job Applicant Privacy Notice for California Residents (
This advertiser has chosen not to accept applicants from your region.
4
Software Engineer - High Security Clearance
GL51 0EX
Open Source
Posted 510 days ago
Job Viewed
Job Description
Job Overview :
We are seeking a Software Engineer with top-level security clearance to contribute to our critical projects. The ideal candidate will have a background in software development and a proven ability to work in high-security environments, with a focus on utilising a variety of technologies.
Key Responsibilities :
Design, develop, and implement software solutions, ensuring alignment with organisational objectives.Collaborate with cross-functional teams to define, design, and ship new features and enhance existing ones.Conduct code reviews to ensure code quality, reliability, and maintainability.Troubleshoot, debug, and optimise the performance of applications.Ensure adherence to software quality and security standards.Keep abreast of the latest industry trends and technologies.Provide technical guidance and mentorship to other engineers.Qualifications :
Proficiency in one or more programming languages, including but not limited to Python, Java, C#, JavaScript, TypeScript, Ruby, PHP, or Go.Strong problem-solving skills and the ability to work in a dynamic, fast-paced environment.Excellent communication and collaboration skills. RequirementsSecurity Clearances :
The candidate must possess one or more of the following top-level security clearances:
SIA DV (Security Industry Authority Developed Vetting)Cheltenham DV (Developed Vetting specific to Cheltenham)MI5 DV (Military Intelligence, Section 5 Developed Vetting)BenefitsBenefits :
Competitive salary and bonus structure.Comprehensive health and wellness benefits.Opportunities for professional growth and development.
This advertiser has chosen not to accept applicants from your region.
5
Application Security Architect (Software)
Bentley Systems
Posted 7 days ago
Job Viewed
Job Description
**Application Security Architect (Software)**
**Location: Europe-Based** (Office/ Hybrid/Home)
**Position Summary:**
We are seeking a visionary **Application Security Architect** to elevate our software security strategy across a global portfolio of cutting-edge products. As a key member of our Product Security team, you'll define and drive secure architecture practices, influence engineering decisions, and help shape the future of secure software development.
This is a high-impact role where your expertise will directly contribute to protecting mission-critical infrastructure software used worldwide. You'll collaborate with talented engineers across Europe and beyond, working with modern technologies like Azure, Kubernetes, Electron, and a wide range of programming languages.
If you're passionate about building secure systems, influencing technical direction, and mentoring others-this is your opportunity to make a lasting impact.
**Responsibilities** :
+ **Lead the adoption and evolution of Secure Software Development Lifecycle (SSDLC)** practices and standards across teams and projects.
+ Conduct **security architecture and design reviews** to ensure robust protection of applications and systems.
+ ️ Drive and mature **threat modeling** practices across the organization, identifying and mitigating risks early in the development process.
+ Collaborate with empowered, cross-functional teams to embed security into the **design, development, implementation, and verification** of software.
+ Provide clear, actionable **remediation guidance** to developers and system administrators.
+ ️ Support stakeholders in making **informed, risk-based decisions** that balance technical and business priorities.
+ Deliver **training sessions and educational content** to upskill developers and promote a security-first mindset.
+ ️ Build and maintain **tools and automation** that enhance security workflows and reduce manual effort.
**Qualifications** :
+ Approximately **7+ years of experience in software** , with **4+ years focused on Application Security Architecture** .
+ ️ Strong proficiency in **securing cloud environments** , ideally with hands-on experience in Azure.
+ Proven expertise in **threat modeling** complex software systems.
+ Solid foundation in **software development** , with the ability to read, write, and audit code across multiple languages.
+ Deep understanding of **OWASP Top 10** , **SANS Top 25** , and common security vulnerabilities.
+ Experience with **containerization and orchestration tools** such as **Kubernetes, Docker, and Istio** .
+ Ability to **deconstruct complex systems** to identify potential threats and weaknesses.
+ Exceptional communication skills-able to clearly articulate technical risks to developers, engineers, administrators, and leadership.
+ Demonstrated ability to **learn quickly** , research new topics, and adapt to evolving technologies.
+ Strong problem-solving skills and a proactive approach to tackling security challenges.
+ ️ Ability to make **balanced, unbiased decisions** that consider both technical risks and business impact.
**Bonus Skills That Set You Apart:**
+ Knowledge of **OAuth 2.0 / OpenID Connect** and modern authentication protocols.
+ Familiarity with **web technologies** including **JavaScript, HTML5, HTTP, REST** , and related protocols.
+ Proficiency in one or more programming languages/platforms such as **.NET Core, Node.js, C#, Java, TypeScript, C/C++** .
+ Certifications such as **CISSP** or **CCSP** are a strong plus.
**What We Offer:**
+ A great Team and culture - please see our colleague video .
+ An exciting career as an integral part of a world-leading software company providing solutions for architecture, engineering, and construction - watch this short documentary about how we got our start.
+ An attractive salary and benefits package.
+ A commitment to inclusion, belonging, and colleague wellbeing through global initiatives and resource groups.
+ A company committed to making a real difference by advancing the world's infrastructure for a better quality of life, where your contributions help build a more sustainable, connected, and resilient world. Discover our latest user success stories for an insight into our global impact.
**About Bentley Systems**
Around the world, infrastructure professionals rely on software from Bentley Systems to help them design, build, and operate better and more resilient infrastructure for transportation, water, energy, cities, and more. Founded in 1984 by engineers for engineers, Bentley is the partner of choice for engineering firms and owner-operators worldwide, with software that spans engineering disciplines, industry sectors, and all phases of the infrastructure lifecycle. Through our digital twin solutions, we help infrastructure professionals unlock the value of their data to transform project delivery and asset performance. Opportunity Employer:**
Bentley is proud to be an equal opportunity employer and considers for employment all qualified applicants without regard to race, color, gender/gender identity, sexual orientation, disability, marital status, religion/belief, national origin, caste, age, or any other characteristic protected by local law or unrelated to job qualifications.
**#LI-VP**
**#LI-Remote**
**#LI-Hybrid**
Equal Opportunity Employer/Minorities/Females/Veterans/Disabled
**Location: Europe-Based** (Office/ Hybrid/Home)
**Position Summary:**
We are seeking a visionary **Application Security Architect** to elevate our software security strategy across a global portfolio of cutting-edge products. As a key member of our Product Security team, you'll define and drive secure architecture practices, influence engineering decisions, and help shape the future of secure software development.
This is a high-impact role where your expertise will directly contribute to protecting mission-critical infrastructure software used worldwide. You'll collaborate with talented engineers across Europe and beyond, working with modern technologies like Azure, Kubernetes, Electron, and a wide range of programming languages.
If you're passionate about building secure systems, influencing technical direction, and mentoring others-this is your opportunity to make a lasting impact.
**Responsibilities** :
+ **Lead the adoption and evolution of Secure Software Development Lifecycle (SSDLC)** practices and standards across teams and projects.
+ Conduct **security architecture and design reviews** to ensure robust protection of applications and systems.
+ ️ Drive and mature **threat modeling** practices across the organization, identifying and mitigating risks early in the development process.
+ Collaborate with empowered, cross-functional teams to embed security into the **design, development, implementation, and verification** of software.
+ Provide clear, actionable **remediation guidance** to developers and system administrators.
+ ️ Support stakeholders in making **informed, risk-based decisions** that balance technical and business priorities.
+ Deliver **training sessions and educational content** to upskill developers and promote a security-first mindset.
+ ️ Build and maintain **tools and automation** that enhance security workflows and reduce manual effort.
**Qualifications** :
+ Approximately **7+ years of experience in software** , with **4+ years focused on Application Security Architecture** .
+ ️ Strong proficiency in **securing cloud environments** , ideally with hands-on experience in Azure.
+ Proven expertise in **threat modeling** complex software systems.
+ Solid foundation in **software development** , with the ability to read, write, and audit code across multiple languages.
+ Deep understanding of **OWASP Top 10** , **SANS Top 25** , and common security vulnerabilities.
+ Experience with **containerization and orchestration tools** such as **Kubernetes, Docker, and Istio** .
+ Ability to **deconstruct complex systems** to identify potential threats and weaknesses.
+ Exceptional communication skills-able to clearly articulate technical risks to developers, engineers, administrators, and leadership.
+ Demonstrated ability to **learn quickly** , research new topics, and adapt to evolving technologies.
+ Strong problem-solving skills and a proactive approach to tackling security challenges.
+ ️ Ability to make **balanced, unbiased decisions** that consider both technical risks and business impact.
**Bonus Skills That Set You Apart:**
+ Knowledge of **OAuth 2.0 / OpenID Connect** and modern authentication protocols.
+ Familiarity with **web technologies** including **JavaScript, HTML5, HTTP, REST** , and related protocols.
+ Proficiency in one or more programming languages/platforms such as **.NET Core, Node.js, C#, Java, TypeScript, C/C++** .
+ Certifications such as **CISSP** or **CCSP** are a strong plus.
**What We Offer:**
+ A great Team and culture - please see our colleague video .
+ An exciting career as an integral part of a world-leading software company providing solutions for architecture, engineering, and construction - watch this short documentary about how we got our start.
+ An attractive salary and benefits package.
+ A commitment to inclusion, belonging, and colleague wellbeing through global initiatives and resource groups.
+ A company committed to making a real difference by advancing the world's infrastructure for a better quality of life, where your contributions help build a more sustainable, connected, and resilient world. Discover our latest user success stories for an insight into our global impact.
**About Bentley Systems**
Around the world, infrastructure professionals rely on software from Bentley Systems to help them design, build, and operate better and more resilient infrastructure for transportation, water, energy, cities, and more. Founded in 1984 by engineers for engineers, Bentley is the partner of choice for engineering firms and owner-operators worldwide, with software that spans engineering disciplines, industry sectors, and all phases of the infrastructure lifecycle. Through our digital twin solutions, we help infrastructure professionals unlock the value of their data to transform project delivery and asset performance. Opportunity Employer:**
Bentley is proud to be an equal opportunity employer and considers for employment all qualified applicants without regard to race, color, gender/gender identity, sexual orientation, disability, marital status, religion/belief, national origin, caste, age, or any other characteristic protected by local law or unrelated to job qualifications.
**#LI-VP**
**#LI-Remote**
**#LI-Hybrid**
Equal Opportunity Employer/Minorities/Females/Veterans/Disabled
This advertiser has chosen not to accept applicants from your region.
Be The First To Know
About the latest Product security engineer Jobs in United Kingdom !
6
Senior Product Manager, Security
Coinbase
Posted 5 days ago
Job Viewed
Job Description
Ready to be pushed beyond what you think you're capable of?
At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system.
To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems.
Our is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be.
While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported.
We are seeking a talented and motivated Senior Product Manager to join Coinbase's Security Platform Engineering and drive Coinbase to achieve its mission of being the most trusted crypto platform. You will play a crucial role in tackling the most challenging problems in crypto custody and security: secrets management, risk management, insider threat, account take over, regulatory compliance, and more. You will work closely with cross-functional teams, including Engineering, Security, Compliance, and Operations, to deliver solutions that push the boundaries and lead the industry in crypto security technology, creating measurable impacts in the security and user experience of our customers. Our security platforms are industry-leading and have resulted in multiple patents due to their cutting-edge technology.
*What you'll be doing (ie. job duties):*
* Define and build out Coinbase's Security platform strategy that serves our businesses globally
* Own security platform products from conception to launch, ensuring desired impacts are achieved
* Stay up-to-date with onchain and security technologies and creatively bring innovation to security platforms
* Collaborate cross-functionally with engineering, security, operations, compliance, others, to develop and steer product roadmap
* Work closely with client teams and customers to raise business requirements
* Define and analyze metrics to guide product development
* Align teams on a shared vision and steer execution on that vision
*What we look for in you (ie. job requirements):*
* 6+ years of product management experience
* Exceptional interpersonal communication, relationship management and organizational skills
* Deep analytical, prioritization and problem solving skills
* Demonstrated ability in working with a high degree of technical complexity across a broad product portfolio
* Previous experience working in software product management in platform products
* Demonstrated passion for cryptocurrency, financial markets, and the Coinbase mission
* An entrepreneurial mindset with the ability to succeed in a fast-paced environment
* Aptitude for learning and ability to quickly ramp up in complicated domains
*Nice to haves:*
* Previous experience with security, privacy and compliance products
* Previous experience in the crypto industry
Job #: P69466
*Pay Transparency Notice: *The target annual salary for this position can range as detailed below. Full time offers from Coinbase also include target bonus + target equity + benefits (including medical, dental, and vision).
Pay Range:
£138,600-£154,000 GBP
Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.
Commitment to Equal Opportunity
Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the in certain locations, as required by law.
Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations Data Privacy Notice for Job Candidates and Applicants
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available Disclosure
For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description.
For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate.
*The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment*. To request a reasonable accommodation due to disability, please contact accommodations(at)coinbase.com
At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system.
To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems.
Our is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be.
While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported.
We are seeking a talented and motivated Senior Product Manager to join Coinbase's Security Platform Engineering and drive Coinbase to achieve its mission of being the most trusted crypto platform. You will play a crucial role in tackling the most challenging problems in crypto custody and security: secrets management, risk management, insider threat, account take over, regulatory compliance, and more. You will work closely with cross-functional teams, including Engineering, Security, Compliance, and Operations, to deliver solutions that push the boundaries and lead the industry in crypto security technology, creating measurable impacts in the security and user experience of our customers. Our security platforms are industry-leading and have resulted in multiple patents due to their cutting-edge technology.
*What you'll be doing (ie. job duties):*
* Define and build out Coinbase's Security platform strategy that serves our businesses globally
* Own security platform products from conception to launch, ensuring desired impacts are achieved
* Stay up-to-date with onchain and security technologies and creatively bring innovation to security platforms
* Collaborate cross-functionally with engineering, security, operations, compliance, others, to develop and steer product roadmap
* Work closely with client teams and customers to raise business requirements
* Define and analyze metrics to guide product development
* Align teams on a shared vision and steer execution on that vision
*What we look for in you (ie. job requirements):*
* 6+ years of product management experience
* Exceptional interpersonal communication, relationship management and organizational skills
* Deep analytical, prioritization and problem solving skills
* Demonstrated ability in working with a high degree of technical complexity across a broad product portfolio
* Previous experience working in software product management in platform products
* Demonstrated passion for cryptocurrency, financial markets, and the Coinbase mission
* An entrepreneurial mindset with the ability to succeed in a fast-paced environment
* Aptitude for learning and ability to quickly ramp up in complicated domains
*Nice to haves:*
* Previous experience with security, privacy and compliance products
* Previous experience in the crypto industry
Job #: P69466
*Pay Transparency Notice: *The target annual salary for this position can range as detailed below. Full time offers from Coinbase also include target bonus + target equity + benefits (including medical, dental, and vision).
Pay Range:
£138,600-£154,000 GBP
Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.
Commitment to Equal Opportunity
Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the in certain locations, as required by law.
Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations Data Privacy Notice for Job Candidates and Applicants
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available Disclosure
For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description.
For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate.
*The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment*. To request a reasonable accommodation due to disability, please contact accommodations(at)coinbase.com
This advertiser has chosen not to accept applicants from your region.
7
GenAI Security Product Owner
London, London
Citigroup
Posted 6 days ago
Job Viewed
Job Description
**Overview of Citi** **:**
Citi, the world leading global bank, has approximately 200 million customer accounts and a presence in more than 160 countries and jurisdictions worldwide. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management. Citi enables clients to achieve their strategic financial objectives by providing them with cutting-edge ideas, best-in-class products and solutions, and unparalleled access to capital and liquidity.
**The Team:**
The Chief Information Security Office (CISO) is responsible for looking after the cyber security of all of Citi's technical assets. It has several new and exciting programmes utilising cutting edge cloud and container technologies, with a view to ensuring that our cyber security is best in class and offers reassurance to our wider business lines and clients alike.
**The job:**
This role sits within the newly formed GenAI Security team, which is responsible for ensuring, maintaining, and improving the security of our GenAi Prompt security capabilities within the firm. You will be the Product Owner for this capability, working to strengthen and broaden our security capabilities in an environment that is changing daily whilst also working with vendor products to achieve the same aims. You will have the opportunity to partner with key engineering teams, alongside Operations and Site Reliability Engineering.
Effective capabilities that combine security and engineering excellence are key to success.
**What the role covers:**
+ Champion Agile concepts with internal teams and clients
+ Ensure the correct user stories are always aligned to roadmap to stay ahead of project deadlines
+ Facilitate the creation and maintenance of backlogs
+ Lead the co-creation of value-led product goals and maintain continued alignment to completion
+ Make product decisions, while setting and communicating realistic expectations with clients and stakeholders
+ Effectively translate and communicate the business value of technical work to stakeholders
+ Direct the development and delivery of secure solutions by coordinating with business and technical contacts
+ Demonstrate professional consideration for the firm's reputation to safeguard Citigroup, its clients, and assets by driving compliance to applicable laws, regulations, and Citi Policy
+ Apply sound ethical judgment regarding personal behavior, conduct and business practices, while escalating, managing and reporting control issues with transparency
**Job Skills/ Qualifications:**
+ Highly motivated self-starter with excellent interpersonal and problem-solving skills
+ Bachelor's degree or equivalent work experience
+ Good oral and written communication skills
+ 7+ years of relevant industry work experience
+ 3+ years' Product Owner-centric work experience
+ Experience creating and prioritizing backlogs with teams and stakeholders
+ Experience visualizing product goals through roadmaps
+ Knowledge of the full lifecycle of design, implementation and running of enterprise software
+ solutions involving cross functional team collaboration
+ Deep understanding of Product Owner function and Agile concepts
+ Extensive knowledge of Agile Frameworks (Scrum/Kanban/FDD/XP, etc.)
+ Experience and understanding of container and Generative AI technologies
+ Experience working with or around JIRA and Atlassian tools is strongly preferred
+ Security fundamentals experience with platform and DevSecOps is a big plus
**What we can offer you:**
By joining Citi, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as:
+ 27 days annual leave (plus bank holidays)
+ A discretional annual performance related bonus
+ Private Medical Care & Life Insurance
+ Employee Assistance Program
+ Pension Plan
+ Paid Parental Leave
+ Special discounts for employees, family, and friends
+ Access to an array of learning and development resources
Visit our Global Benefits page to learn more. ( these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self, every day. We want the best talent around the world to be energized to join us, motivated to stay and empowered to thrive.
#LI-MK2
---
**Job Family Group:**
Technology
---
**Job Family:**
Information Security
---
**Time Type:**
Full time
---
**Most Relevant Skills**
Please see the requirements listed above.
---
**Other Relevant Skills**
For complementary skills, please see above and/or contact the recruiter.
---
_Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law._
_If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review_ _Accessibility at Citi ( _._
_View Citi's_ _EEO Policy Statement ( _and the_ _Know Your Rights ( _poster._
Citi is an equal opportunity and affirmative action employer.
Minority/Female/Veteran/Individuals with Disabilities/Sexual Orientation/Gender Identity.
Citi, the world leading global bank, has approximately 200 million customer accounts and a presence in more than 160 countries and jurisdictions worldwide. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management. Citi enables clients to achieve their strategic financial objectives by providing them with cutting-edge ideas, best-in-class products and solutions, and unparalleled access to capital and liquidity.
**The Team:**
The Chief Information Security Office (CISO) is responsible for looking after the cyber security of all of Citi's technical assets. It has several new and exciting programmes utilising cutting edge cloud and container technologies, with a view to ensuring that our cyber security is best in class and offers reassurance to our wider business lines and clients alike.
**The job:**
This role sits within the newly formed GenAI Security team, which is responsible for ensuring, maintaining, and improving the security of our GenAi Prompt security capabilities within the firm. You will be the Product Owner for this capability, working to strengthen and broaden our security capabilities in an environment that is changing daily whilst also working with vendor products to achieve the same aims. You will have the opportunity to partner with key engineering teams, alongside Operations and Site Reliability Engineering.
Effective capabilities that combine security and engineering excellence are key to success.
**What the role covers:**
+ Champion Agile concepts with internal teams and clients
+ Ensure the correct user stories are always aligned to roadmap to stay ahead of project deadlines
+ Facilitate the creation and maintenance of backlogs
+ Lead the co-creation of value-led product goals and maintain continued alignment to completion
+ Make product decisions, while setting and communicating realistic expectations with clients and stakeholders
+ Effectively translate and communicate the business value of technical work to stakeholders
+ Direct the development and delivery of secure solutions by coordinating with business and technical contacts
+ Demonstrate professional consideration for the firm's reputation to safeguard Citigroup, its clients, and assets by driving compliance to applicable laws, regulations, and Citi Policy
+ Apply sound ethical judgment regarding personal behavior, conduct and business practices, while escalating, managing and reporting control issues with transparency
**Job Skills/ Qualifications:**
+ Highly motivated self-starter with excellent interpersonal and problem-solving skills
+ Bachelor's degree or equivalent work experience
+ Good oral and written communication skills
+ 7+ years of relevant industry work experience
+ 3+ years' Product Owner-centric work experience
+ Experience creating and prioritizing backlogs with teams and stakeholders
+ Experience visualizing product goals through roadmaps
+ Knowledge of the full lifecycle of design, implementation and running of enterprise software
+ solutions involving cross functional team collaboration
+ Deep understanding of Product Owner function and Agile concepts
+ Extensive knowledge of Agile Frameworks (Scrum/Kanban/FDD/XP, etc.)
+ Experience and understanding of container and Generative AI technologies
+ Experience working with or around JIRA and Atlassian tools is strongly preferred
+ Security fundamentals experience with platform and DevSecOps is a big plus
**What we can offer you:**
By joining Citi, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as:
+ 27 days annual leave (plus bank holidays)
+ A discretional annual performance related bonus
+ Private Medical Care & Life Insurance
+ Employee Assistance Program
+ Pension Plan
+ Paid Parental Leave
+ Special discounts for employees, family, and friends
+ Access to an array of learning and development resources
Visit our Global Benefits page to learn more. ( these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self, every day. We want the best talent around the world to be energized to join us, motivated to stay and empowered to thrive.
#LI-MK2
---
**Job Family Group:**
Technology
---
**Job Family:**
Information Security
---
**Time Type:**
Full time
---
**Most Relevant Skills**
Please see the requirements listed above.
---
**Other Relevant Skills**
For complementary skills, please see above and/or contact the recruiter.
---
_Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law._
_If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review_ _Accessibility at Citi ( _._
_View Citi's_ _EEO Policy Statement ( _and the_ _Know Your Rights ( _poster._
Citi is an equal opportunity and affirmative action employer.
Minority/Female/Veteran/Individuals with Disabilities/Sexual Orientation/Gender Identity.
This advertiser has chosen not to accept applicants from your region.
8
Sr Product Mgr - Cryptographic Security
Field, West Midlands
Entrust
Posted 8 days ago
Job Viewed
Job Description
**Join us at Entrust **
At Entrust, we're shaping the future of identity centric security solutions. From our comprehensive portfolio of solutions to our flexible, global workplace, we empower careers, foster collaboration, and build solutions that help keep the world moving safely.
**Get to Know Us **
Headquartered in Minnesota, Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. But our secret weapon? Our people. It's the curiosity, dedication, and innovation that drive our success and help us anticipate the future.
We're looking for a **Sr. Product Manager - PKI, Certificate & Cryptographic Asset Life Cycle Management, Post Quantum Cryptography, and IoT**
The rise of digital business is rapidly driving an increased number of machines in an organization, and proper security requires these machines are secured by a credential/certificate/identity. Entrust and our core PKI technology is uniquely positioned to help customers accelerate their digital business strategies by establishing trust in their infrastructure and interactions. Doing so requires new delivery models, innovations, and relationships with key players in a rapidly changing ecosystem. Public Key Infrastructure is synonymous with the Entrust brand, we have a great and growing customer footprint, and we're accelerating investments in these areas.
We are seeking a Sr Product Manager to join our growing Private Trust product team. This position will be responsible for developing product roadmaps, solution requirements and leading cross-functional teams to ultimately deliver solutions with unique value to our customers and that help us achieve our business level goals. The Sr Product Manager will have a mix of Inbound and Outbound Product Management responsibilities.
+ We offer flexibility
+ We offer a diverse work environment
+ Futureproof your career with a job in information security
**Our Product Team Values**
+ Great Products - We believe in developing a great product through a deep understanding of our users with a variety of qualitative and quantitative methods, creative use of technology, exemplary design, and an open mindedness to new ideas.
+ Great Team Spirit - We believe that the whole product team - engineers, designers, and product managers - should be actively empowered to contribute to product development.
+ High Speed - We believe in the lean approach of quickly validating assumptions with evidence and iterating quickly.
+ Customer Commitment - We are committed to improving the lives of our customers and providing the best possible work environment for our team members.
**How you will make an impact:**
+ Develop and execute PKI, Certificate & Cryptographic Asset Life Cycle Management, Post Quantum Cryptography, and IoT product strategies and roadmap within the boundaries of the defined portfolio strategy.
+ Shaping the product portfolio strategy.
+ Own the prioritization of product requirements and user stories for new products/services as well as enhancements / change requirements for existing products/services to meet changing market and competitive needs.
+ Lead cross-functional teams consisting of engineers, operations, marketing, and stakeholders from business units to develop, implement and maintain products as ensure timely deployments of product releases.
+ Evangelize solution value proposition and offerings at customer visits, sales training, seminars, and trade shows.
+ Provide product support to sales, professional services, customer support, customers and other stakeholders. Facilitate customer and partner proof of concepts as well as deployments.
+ Help develop and review content sales/marketing collateral (e.g. customer presentations, white papers, competitive briefings, product demonstrations, data sheets, and FAQs)
**Qualifications:**
**Basic Qualifications**
+ Strong desire to develop new and enhance existing Cyber Security products, taking ownership, drive improvements.
+ Strong product management skills including product pricing development, and business sense. Well-organized working style. Ability to structure and prioritize work in a manner that best fits the team and company needs.
+ Demonstrated success in leading and influencing cross-functional teams.
+ AGILE development processes experience
+ Experience creating specifications for use by both technical and non-technical readers.
+ Excellent written communication skills and well-honed presentation skills. Able to communicate complex issues and findings in a clear, structured manner appropriate for intended audience.
+ Must have unrestricted work authorization for USA, Canada, Asia, or Europe.
+ Ability to travel internationally up to 20%.
**Preferred Qualifications**
+ Bachelor's degree in business, computer science, or related technical discipline
+ Experience in PKI, Post Quantum Cryptography, Certificate Life Cycle Management, Key & Secret Management, IoT, and Cryptographic technologies including hardware security.
+ Experience in IT Network Scanners, and IT Security Discovery Agents
+ Experience working with shared managed Cloud, dedicated Enterprise, and Government applications.
+ Understanding and experience working with Edge Node, or End Entity Clients respectively Agents
+ Highly collaborative team player with a "whatever it takes" mentality. Able to work in a team environment with members in remote locations.
+ Able to work autonomously and manage multiple ongoing products.
+ Flexible and comfortable to perform in unstructured or ambiguous situations and adapt as business evolves.
+ Ability to think strategically, holistically, and from a customer viewpoint.
**Why Should You Apply?**
+ Leader in the security industry
+ Friendly, supportive & knowledgeable teams
+ Opportunities for on-the-job training
+ You'll help secure identities!
For more information, visit ( . Follow us on LinkedIn ( , Facebook ( , Instagram ( , and YouTube ( .
#LI-XT1
At Entrust, we don't just offer jobs - we offer career journeys. Here is what you can expect when you join our team:
+ Career Growth: Whether you're a budding developer or a seasoned expert, we're invested in your professional journey. With learning-forward initiatives and exciting challenges, your growth is our priority.
+ Flexibility: Life is all about balance. Whether you're remote, hybrid, or on-site, we offer flexible options that fit your lifestyle.
+ Collaboration: Here, your voice matters. Our teams thrive on sharing ideas, brainstorming solutions, and working together to build a better tomorrow.
We believe in securing identities-but it doesn't stop there. At Entrust, we're passionate about valuing all identities. Our culture is built on diversity, inclusion, and respect. From unconscious bias training for our leaders to global affinity groups that connect colleagues across the globe, we're creating a community where everyone is encouraged to be themselves.
**Ready to Make an Impact? **
If you're excited by the prospect of innovating, growing your career, and collaborating in a dynamic environment, Entrust is the place for you. Join us in making a difference. Let's build a more secure world-together.
**Apply today! **
For more information, visit ( . Follow us on, LinkedIn ( , Facebook ( , Instagram ( , and YouTube ( US roles, or where applicable:_
**Entrust is an** **EEO/AA/Disabled/Veterans** **Employer**
_For Canadian roles, or where applicable:_
**Entrust values diversity and inclusion and we are committed to building a diverse workforce with wide perspectives and innovative ideas. We welcome applications from qualified individuals of all backgrounds, and we strive to provide an accessible experience for candidates of all abilities.**
_If you require an accommodation, contact_ _._
**Recruiter:**
Xochitl Ticas Lara
Entrust is an innovative leader in identity-centric security solutions, providing an integrated platform of scalable, AI-enabled security offerings. We enable organizations to safeguard their operations, evolve without compromise, and protect their interactions in an interconnected world - so they can transform their businesses with confidence. Entrust supports customers in 150+ countries and works with a global partner network, we are trusted by the world most trusted organizations.
At Entrust, we're shaping the future of identity centric security solutions. From our comprehensive portfolio of solutions to our flexible, global workplace, we empower careers, foster collaboration, and build solutions that help keep the world moving safely.
**Get to Know Us **
Headquartered in Minnesota, Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. But our secret weapon? Our people. It's the curiosity, dedication, and innovation that drive our success and help us anticipate the future.
We're looking for a **Sr. Product Manager - PKI, Certificate & Cryptographic Asset Life Cycle Management, Post Quantum Cryptography, and IoT**
The rise of digital business is rapidly driving an increased number of machines in an organization, and proper security requires these machines are secured by a credential/certificate/identity. Entrust and our core PKI technology is uniquely positioned to help customers accelerate their digital business strategies by establishing trust in their infrastructure and interactions. Doing so requires new delivery models, innovations, and relationships with key players in a rapidly changing ecosystem. Public Key Infrastructure is synonymous with the Entrust brand, we have a great and growing customer footprint, and we're accelerating investments in these areas.
We are seeking a Sr Product Manager to join our growing Private Trust product team. This position will be responsible for developing product roadmaps, solution requirements and leading cross-functional teams to ultimately deliver solutions with unique value to our customers and that help us achieve our business level goals. The Sr Product Manager will have a mix of Inbound and Outbound Product Management responsibilities.
+ We offer flexibility
+ We offer a diverse work environment
+ Futureproof your career with a job in information security
**Our Product Team Values**
+ Great Products - We believe in developing a great product through a deep understanding of our users with a variety of qualitative and quantitative methods, creative use of technology, exemplary design, and an open mindedness to new ideas.
+ Great Team Spirit - We believe that the whole product team - engineers, designers, and product managers - should be actively empowered to contribute to product development.
+ High Speed - We believe in the lean approach of quickly validating assumptions with evidence and iterating quickly.
+ Customer Commitment - We are committed to improving the lives of our customers and providing the best possible work environment for our team members.
**How you will make an impact:**
+ Develop and execute PKI, Certificate & Cryptographic Asset Life Cycle Management, Post Quantum Cryptography, and IoT product strategies and roadmap within the boundaries of the defined portfolio strategy.
+ Shaping the product portfolio strategy.
+ Own the prioritization of product requirements and user stories for new products/services as well as enhancements / change requirements for existing products/services to meet changing market and competitive needs.
+ Lead cross-functional teams consisting of engineers, operations, marketing, and stakeholders from business units to develop, implement and maintain products as ensure timely deployments of product releases.
+ Evangelize solution value proposition and offerings at customer visits, sales training, seminars, and trade shows.
+ Provide product support to sales, professional services, customer support, customers and other stakeholders. Facilitate customer and partner proof of concepts as well as deployments.
+ Help develop and review content sales/marketing collateral (e.g. customer presentations, white papers, competitive briefings, product demonstrations, data sheets, and FAQs)
**Qualifications:**
**Basic Qualifications**
+ Strong desire to develop new and enhance existing Cyber Security products, taking ownership, drive improvements.
+ Strong product management skills including product pricing development, and business sense. Well-organized working style. Ability to structure and prioritize work in a manner that best fits the team and company needs.
+ Demonstrated success in leading and influencing cross-functional teams.
+ AGILE development processes experience
+ Experience creating specifications for use by both technical and non-technical readers.
+ Excellent written communication skills and well-honed presentation skills. Able to communicate complex issues and findings in a clear, structured manner appropriate for intended audience.
+ Must have unrestricted work authorization for USA, Canada, Asia, or Europe.
+ Ability to travel internationally up to 20%.
**Preferred Qualifications**
+ Bachelor's degree in business, computer science, or related technical discipline
+ Experience in PKI, Post Quantum Cryptography, Certificate Life Cycle Management, Key & Secret Management, IoT, and Cryptographic technologies including hardware security.
+ Experience in IT Network Scanners, and IT Security Discovery Agents
+ Experience working with shared managed Cloud, dedicated Enterprise, and Government applications.
+ Understanding and experience working with Edge Node, or End Entity Clients respectively Agents
+ Highly collaborative team player with a "whatever it takes" mentality. Able to work in a team environment with members in remote locations.
+ Able to work autonomously and manage multiple ongoing products.
+ Flexible and comfortable to perform in unstructured or ambiguous situations and adapt as business evolves.
+ Ability to think strategically, holistically, and from a customer viewpoint.
**Why Should You Apply?**
+ Leader in the security industry
+ Friendly, supportive & knowledgeable teams
+ Opportunities for on-the-job training
+ You'll help secure identities!
For more information, visit ( . Follow us on LinkedIn ( , Facebook ( , Instagram ( , and YouTube ( .
#LI-XT1
At Entrust, we don't just offer jobs - we offer career journeys. Here is what you can expect when you join our team:
+ Career Growth: Whether you're a budding developer or a seasoned expert, we're invested in your professional journey. With learning-forward initiatives and exciting challenges, your growth is our priority.
+ Flexibility: Life is all about balance. Whether you're remote, hybrid, or on-site, we offer flexible options that fit your lifestyle.
+ Collaboration: Here, your voice matters. Our teams thrive on sharing ideas, brainstorming solutions, and working together to build a better tomorrow.
We believe in securing identities-but it doesn't stop there. At Entrust, we're passionate about valuing all identities. Our culture is built on diversity, inclusion, and respect. From unconscious bias training for our leaders to global affinity groups that connect colleagues across the globe, we're creating a community where everyone is encouraged to be themselves.
**Ready to Make an Impact? **
If you're excited by the prospect of innovating, growing your career, and collaborating in a dynamic environment, Entrust is the place for you. Join us in making a difference. Let's build a more secure world-together.
**Apply today! **
For more information, visit ( . Follow us on, LinkedIn ( , Facebook ( , Instagram ( , and YouTube ( US roles, or where applicable:_
**Entrust is an** **EEO/AA/Disabled/Veterans** **Employer**
_For Canadian roles, or where applicable:_
**Entrust values diversity and inclusion and we are committed to building a diverse workforce with wide perspectives and innovative ideas. We welcome applications from qualified individuals of all backgrounds, and we strive to provide an accessible experience for candidates of all abilities.**
_If you require an accommodation, contact_ _._
**Recruiter:**
Xochitl Ticas Lara
Entrust is an innovative leader in identity-centric security solutions, providing an integrated platform of scalable, AI-enabled security offerings. We enable organizations to safeguard their operations, evolve without compromise, and protect their interactions in an interconnected world - so they can transform their businesses with confidence. Entrust supports customers in 150+ countries and works with a global partner network, we are trusted by the world most trusted organizations.
This advertiser has chosen not to accept applicants from your region.
9