At a Glance
- Tasks: Secure our innovative SaaS product by collaborating with engineering and security teams.
- Company: Join a fast-growing tech company trusted by Fortune 500 firms.
- Benefits: Enjoy fully remote work, high ownership, and impactful contributions.
- Other info: Be part of a supportive team that values continuous learning and practical decision-making.
- Why this job: Make a real difference in product security while working with cutting-edge technology.
- Qualifications: 3+ years in product security or related fields with strong software engineering skills.
The predicted salary is between 63000 - 77000 £ per year.
Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in minutes—it just works and is always free for the first 200 endpoints with no functional limits. By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment without requiring a VPN, Action1 eliminates routine IT labor, helps prevent ransomware and security risks, and protects the digital employee experience.
The Role
We are looking for a Product Security Engineer to join the team responsible for securing Action1's multi-tenant SaaS product. In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, improve secure development practices, and help make product security practical, clear, and actionable. This is a hands-on role for someone who understands both software engineering and cybersecurity, enjoys working directly with developers, and wants to help build security into the product without slowing teams down unnecessarily.
What You’ll Do
- Support PSIRT and vulnerability handling activities
- Validate, triage, track, and coordinate security reports
- Provide practical remediation guidance to engineering teams
- Help validate security fixes and reduce product security risks
- Review code, APIs, and architecture to identify security issues early
- Conduct threat modeling and security design reviews
- Improve security automation in engineering workflows
- Support SAST, SCA, secrets scanning, and other security controls
- Maintain SBOMs, dependency visibility, and remediation follow-up
- Support security assessments, vulnerability assessments, and penetration testing
- Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks
What We’re Looking For
- 3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field
- Strong software engineering background and ability to work effectively with engineering teams
- Understanding of application, API, infrastructure, and software supply chain security risks
- Experience applying cloud security concepts and practices
- Understanding of IAM, network security, logging, monitoring, and secure cloud architecture patterns
- Familiarity with vulnerability management, incident response, security assessments, and secure SDLC practices
- Experience with threat modeling and security design reviews
- Strong communication skills, including professional communication with external researchers and vendors
- Ability to work independently and as part of a team in a fast-moving environment
Nice to have
- Genuine interest in cybersecurity and motivation to grow as a product security expert
- Hands-on experience with AWS security controls, best practices, and architecture patterns
- Hands-on experience with C++ or JavaScript
- Experience with security testing and automation using scripting, APIs, CI/CD pipelines, or specialized tools
- Experience with threat modeling for SaaS, API, cloud, or on-prem product components
- Experience with SBOM generation, dependency visibility, or software supply chain security
What We Offer
- Fully remote work environment
- Opportunity to work on a real security product used by IT and security teams
- High ownership and direct impact on product security practices
- Close collaboration with engineering, product, and security teams
- Fast-growing software company with low bureaucracy and practical decision-making
- Opportunity to improve security processes, automation, and engineering workflows
- Supportive team that values clear thinking, ownership, and continuous learning
Product Security Engineer employer: Action1
Action1 is an exceptional employer that offers a fully remote work environment, providing you with the flexibility to balance your professional and personal life. With a focus on employee growth, you'll find numerous opportunities for promotion and development while working alongside friendly and professional peers who are eager to support your journey. Join us to tackle interesting challenges in the dynamic field of cybersecurity and make a meaningful impact in enterprise accounts across the UK.
StudySmarter Expert Advice🤫
We think this is how you could land Product Security Engineer
✨Join Local Tech Meetups
Get out there and mingle with fellow developers by joining local tech meetups. It’s a fantastic way to meet people who might be working at Action1 or know someone who does. Plus, you can pick up some trendy tech skills and trends while you're at it!
✨Contribute to Open Source Projects
Show off your coding chops by jumping into open-source projects. Not only does this give you practical experience, but it also gets you noticed in the dev community. You'll create a killer portfolio that speaks volumes about your skills to Action1.
✨Tap into Online Developer Communities
Don’t underestimate the power of online developer communities like GitHub, Stack Overflow, and even Reddit. Participate in discussions, share your projects, and build your visibility. We can often find opportunities through these channels that can lead to a full-time gig at companies like Action1.
✨Explore Job Boards Specifically for Tech Roles
Keep your eyes peeled on job boards that focus on tech roles. Sites like TechCareers or Stack Overflow Jobs can often have listings for companies like Action1 that might not show up on broader job sites. Make it a habit to check these regularly, and don’t hesitate to apply directly through our website!
We think you need these skills to ace Product Security Engineer
Some tips for your application 🫡
Show off your coding skills:When applying for a software engineering role, it's super important to showcase your coding skills. Make sure your CV includes your tech stack, any relevant programming languages you’re comfortable with, and examples of projects you've worked on. If you have a GitHub profile, link it up! We love to see code in action.
Tailor your portfolio:For a full-time role, we’d expect to see some solid examples of your work in your portfolio. Make sure to include at least two or three projects that highlight your problem-solving skills and your ability to work with different technologies. Focus on the projects that are most relevant to the position at Action1.
Craft a killer cover letter:Your cover letter is your chance to stand out—make it personal! Explain why you want to work at Action1 and how your skills align with the role. Show us your passion for software development. We dig enthusiastic candidates who understand the value of collaboration and continuous learning!
Be clear and concise:When it comes to writing your CV and cover letter, clarity is key. Avoid jargon that could confuse us and stick to simple, direct language. Highlight your achievements with quantifiable results where possible, and keep everything easy to read. A well-organised application goes a long way!
How to prepare for a job interview at Action1
✨Brush Up on Your Coding Skills
For a full-time software engineering role, it's crucial that we stay sharp with our coding abilities. Expect technical questions that might involve solving problems on the spot or discussing algorithms. Practise on platforms like LeetCode or HackerRank to get comfortable with the types of questions that often come up.
✨Know Your Tools and Frameworks
Make sure we’re well-acquainted with the tools and technologies listed in the job description. Familiarise ourselves with any specific frameworks or programming languages mentioned. If Action1 uses React or Node.js, for instance, be ready to discuss how we’ve used them in previous projects or coursework.
✨Showcase Your Projects
Bring along a portfolio that highlights our best work. This could be code samples, GitHub repositories, or any side projects we’ve built. Make sure we can talk through our thought process for each project, especially the challenges we faced and how we solved them—this shows our problem-solving skills in action.
✨Prepare for Behavioural Questions
While technical skills are key, full-time positions also require cultural fit. Be ready to discuss our previous experiences and how we handle teamwork, conflict, and deadlines. Brush up on the STAR method—Situation, Task, Action, Result—to clearly articulate our past experiences when discussing how we've contributed to a team.
