Principal Product Security Engineer (copy)

Location: London, UK; hybrid work with presence in the London office

Company

hirify.global operates an ecommerce platform and an engineering organisation supported by an enterprise technology function.

What you will do

• Collaborate with engineers, architects, and product teams to turn security challenges into pragmatic solutions.
• Mentor engineers and Security Champions and embed security into engineering culture.
• Build security automation that improves outcomes while reducing friction for engineering teams.
• Lead threat modelling and security architecture reviews for key products and technology initiatives.
• Define security principles, standards, patterns, and guardrails across the platform and engineering organisation.
• Provide hands-on expertise across APIs, microservices, AWS cloud infrastructure, authentication, authorisation, software supply chains, and AI-related security risks.

Requirements

• 5+ years of experience in Product Security, Application Security, or Security Engineering within a modern software environment.
• Strong experience in security architecture and threat modelling, with the ability to turn risk into practical engineering solutions.
• Deep technical knowledge of application and API security, secure development practices, modern software architectures, and cloud-native systems.
• Experience embedding security controls into engineering workflows, software supply chains including SBOMs, and the broader software development lifecycle.
• Excellent communication skills and the ability to build trust and influence engineers, architects, and senior technical leaders without direct authority.
• Experience with, or a strong interest in, AI security and using AI tools to advance security engineering.

Nice to have

• Hands-on experience with Infrastructure as Code security, scaling Security Champions programmes, or managing Bug Bounty programmes.
• Relevant industry or cloud security certifications such as CISSP, CSSLP, or AWS Security Specialty.

Culture & Benefits

• Permanent employment in a senior individual contributor role.
• Significant autonomy and influence over Product Security standards and technical direction.
• Direct collaboration with engineers, architects, product teams, and senior technical stakeholders.
• Hybrid work based in the London office.