Security Engineer – Product Security
United Talent Agency8 hours ago
London, United KingdomMid Level
Responsibilities
- Support product security architecture and design reviews for web, mobile, and cloud-based applications.
- Define product security requirements, risk tolerances, and security roadmaps with product and engineering leadership.
- Conduct threat modeling workshops and drive mitigations into product design.
- Own and mature the application and product security lifecycle, including secure design, coding, testing, and release validation.
- Drive SAST, DAST, SCA, secrets scanning, and other automated security checks in CI/CD pipelines.
- Coordinate application security testing, vulnerability triage, remediation planning, and validation of fixes.
- Establish secure coding standards, reusable frameworks, API security practices, and cloud security controls.
- Collaborate with security operations on product logging, alerting, monitoring, and incident response workflows.
- Evaluate product security tools and services and influence build-versus-buy decisions.
- Develop security documentation, playbooks, training, and guidance for AI-assisted development tools.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience.
- At least 3 years of experience in security engineering, application security, or product-aligned security roles.
- Experience owning and driving security initiatives and remediating common web, mobile, and API vulnerabilities.
- Experience securing applications and services in at least one major cloud provider, preferably AWS.
- Knowledge of SAST, DAST, SCA, secret scanning, WAF, and CI/CD security integration.
- Familiarity with Terraform reviews, GitHub Actions pipeline security, secrets management, container security, Kubernetes RBAC, network policies, and runtime protection.
- Familiarity with securing AI/ML platforms and agentic workflows in cloud environments.
- Knowledge of identity, authentication, and authorization technologies such as OAuth, OIDC, SSO, and modern identity platforms.
- Experience collaborating with software engineering teams through design reviews, code reviews, and sprint planning.
- Strong communication and stakeholder management skills, including the ability to influence technical and nontechnical partners.
Benefits
- Opportunity to help create and drive a product security center of excellence at a leading global entertainment company.
- Access to tools, leadership, and resources needed to perform the role.
- Inclusive, diverse, and collaborative company culture with room to grow.
- Programs supporting employee well-being.
Tech Stack
Categories
About United Talent Agency
United Talent Agency is a global entertainment company that represents artists, athletes, writers, and digital creators across film, TV, music, sports, and publishing. It also develops and packages content and provides brand partnerships, advisory, and marketing services, earning commissions and fees. Founded in 1991 and headquartered in Beverly Hills, it operates offices in Los Angeles, New York, London, Nashville, Atlanta, and Chicago.