Senior Product Security Engineer (Fintech)

Location: London, England, United Kingdom; hybrid

Company

hirify.global is an AI-powered fintech platform that automates finance operations, including accounts payable, global payouts, procurement, expenses, cards, supplier management, tax compliance, and treasury.

What you will do

• Partner with development and product teams on application and product security throughout the software development lifecycle.
• Perform hands-on security reviews of applications, APIs, services, and code, and investigate and assess vulnerabilities and security findings.
• Conduct threat modeling and security analysis for new and existing product capabilities.
• Provide remediation guidance, support secure coding, and work with development teams through remediation.
• Use and improve security controls and tooling, including SAST, SCA, DAST, API Security, WAF, and automated development-lifecycle checks.
• Assess web applications, APIs, microservices, containers, Kubernetes, and cloud-native services, and support vulnerability disclosure and Bug Bounty activities.

Requirements

• 5+ years of hands-on experience in Application Security, Product Security, or a closely related software security role.
• Strong understanding of software development and ability to read, understand, and review application code using .NET, JavaScript/TypeScript, or comparable modern technologies.
• Hands-on experience identifying and analyzing application and API security vulnerabilities, performing threat modeling, and conducting application security reviews.
• Strong understanding of authentication, authorization, session management, web security, API security, mobile security, and OWASP Top 10 remediation.
• Hands-on experience with SAST, SCA, DAST, API Security, and WAF.
• Experience with microservices, APIs, containers, Kubernetes, cloud-native environments, and AWS and/or Azure security.
• Understanding of modern CI/CD and software development environments.
• Strong analytical, problem-solving, communication, and collaboration skills, including the ability to turn findings into practical technical recommendations.

Nice to have

• Experience developing security tooling or automation, including CI/CD and software supply chain security.
• Experience with fintech, payments, or security-sensitive SaaS products.
• Experience with vulnerability research, Bug Bounty, or vulnerability disclosure programs.
• Familiarity with AI/LLM application security, AI coding tools, MCP, or agentic systems.
• Security research, open-source contributions, or other demonstrated hands-on security work.

Culture & Benefits

• Collaborative, fast-paced startup-style environment focused on innovation and critical thinking.
• Flexible workplace, competitive benefits, and career coaching.
• Opportunity to work with a diverse, global team of engineers, developers, and product leaders.
• Inclusive workplace committed to equal opportunity and reasonable accommodations during recruitment.