3 months ago
Responsibilities
- Design and implement platform security features and guardrails.
- Write secure code components for use by teams across the business.
- Serve as the security subject-matter expert for the Core Services development team.
- Mentor developers and conduct threat modeling and secure code reviews.
- Help shape incident response procedures and vulnerability management workflows.
- Support security response by validating and remediating product security vulnerabilities.
- Contribute to secure coding standards and provide security training and mentorship.
Requirements
- 8+ years in a developer role focused on designing and building security features.
- Extensive knowledge and implementation experience with RBAC and ABAC.
- Experience with user, agent, and machine authentication workflows.
- Hands-on experience with secure coding, the OWASP Top 10, and threat modeling.
- Strong development skills and extensive experience shipping production code.
- Experience with CI/CD, IaC, Python, and Go.
- Knowledge of authentication and authorization protocols including OAuth, OpenID Connect, SAML, and LDAP.
- Ability to balance pragmatism with security rigor in a fast-paced team.
- Strong communication skills and comfort working across development teams and managing multiple initiatives.
- Preferred: understanding of AI security fundamentals.
- Preferred: participation in bug bounty programs.
- Preferred: familiarity with the BSIMM framework.
- Preferred: cloud security experience, including identity and access management and cloud-native services.
Benefits
- Hybrid work model with time in the Shoreditch office and work-from-home days.
- Equity options.
- 10% employer pension contribution.
- Free office lunches.
- Enhanced parental leave, including 3 months full-pay paternity leave and 6 months full-pay maternity leave.
- YellowNest nursery scheme.
- 25 days of annual leave plus public holidays.
- Private medical insurance with 100% employee cover.
- Wellhub subscription.
- Eye tests.
- Personal development support.
- Employee Assistance Programme.
- Bike2Work scheme.
- Season ticket loan.
- Octopus EV salary sacrifice scheme.
About PhysicsX
PhysicsX is a physical AI company on a mission to accelerate innovation and overhaul what engineering and manufacturing look like today. We are building a new software stack to deliver deep AI enablement across the entire engineering lifecycle. PhysicsX partners with leading organizations in aerospace & defense, automotive, semiconductors, materials, and energy, supporting them on some of their most critical and complex challenges. PhysicsX is headquartered in the United Kingdom, with offices in London and New York. We are currently recruiting for multiple positions, however, please only apply for the role that best aligns with your skillset and career goals.