Security Engineer – Product Security
United Talent Agency14 days ago
London, United KingdomMid Level
Responsibilities
- Support product security architecture and design reviews for web, mobile, cloud-based, and API-driven products.
- Define security requirements, risk tolerances, roadmaps, and mitigations with product and engineering leadership.
- Lead threat modeling, secure development lifecycle activities, secure coding practices, testing, and release validation.
- Integrate and tune automated security checks such as SAST, DAST, SCA, and secrets scanning in CI/CD pipelines.
- Coordinate application security testing, vulnerability triage, remediation planning, and validation of fixes.
- Assess API authentication and authorization, API gateway configurations, cloud-native architectures, containers, and sensitive-data handling.
- Collaborate with security operations on product logs, alerts, monitoring, and incident response workflows.
- Evaluate product security tools and services and influence build-versus-buy decisions.
- Create documentation, playbooks, training, and secure-use guidance for AI-assisted development tools.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience.
- At least 3 years of experience in security engineering, application security, or product-aligned security roles.
- Practical knowledge of web, mobile, API vulnerabilities, and OWASP Top 10 remediation at scale.
- Experience securing applications and services with a major cloud provider, preferably AWS, including cloud-native architectures.
- Knowledge of application security tooling such as SAST, DAST, SCA, secret scanning, and WAF, and experience integrating tools into CI/CD workflows.
- Familiarity with Terraform infrastructure-as-code review, GitHub Actions pipeline security, secrets management, container security, Kubernetes RBAC, network policies, and runtime protection.
- Familiarity with securing AI/ML platforms and agentic workflows in cloud environments.
- Experience collaborating with software engineering teams through design reviews, code reviews, sprint planning, and similar environments.
- Knowledge of identity, authentication, and authorization technologies including OAuth, OIDC, SSO, and modern identity platforms.
- Strong communication and stakeholder management skills with the ability to influence technical and nontechnical partners.
Benefits
- Opportunity to build and drive a product security center of excellence with access to leadership, tools, and resources.
- Inclusive, diverse, and collaborative company culture with room to grow.
- Competitive programs supporting employee well-being.
- The posting describes UTA as a global entertainment company with offices in the United States, London, and Munich.
Tech Stack
Categories