At a Glance
- Tasks: Design and build security capabilities for a leading telemedicine platform.
- Company: Join doxy.me, the world's most loved telemedicine solution.
- Benefits: Unlimited PTO, private healthcare, remote work, and a £500 equipment allowance.
- Other info: Collaborative environment with opportunities for career growth and influence.
- Why this job: Make a real impact on healthcare security while working with cutting-edge technology.
- Qualifications: Experience in software development, application security, and AI integration.
The predicted salary is between 72000 - 88000 £ per year.
We’re doxy.me (doc-see-me), the world's most loved telemedicine solution, and we're on a mission to connect the world to the future of healthcare. This is a software engineering role with security as the domain, not a security role with some scripting attached.
Responsibilities:
- Design and build core SecurityOS capabilities: domain modules, integrations with the systems that feed the platform (identity, endpoints, cloud, code, ticketing), the event model that connects them, and the reporting and console layer on top.
- Build and govern AI agents that operate inside the platform: define what they can do, what context they get, how their actions are controlled and audited, and how they go through the same front door as a human user.
- Own product security for doxy.me's telehealth platform as an embedded engineer: threat modeling with product teams, design and code review, and fixing or building the thing yourself when that is the fastest path.
- Build the security tooling and guardrails that make the right thing the default in our stack, as code our engineers actually use, not as policy documents.
- Automate the security SDLC.
- Shape the roadmap. You will have real influence over what SecurityOS becomes and how the security function at doxy.me operates.
Requirements:
- You can build and ship software. You have taken something from an idea to running in production, maintained it, and had other people depend on it, in TypeScript and Node or a comparable stack.
- You have real depth in application and product security: secure SDLC, threat modeling, secure design and code review, OWASP and how vulnerabilities actually get authored and designed out.
- You have built things nobody asked you to build because you saw they were needed, and they got used.
- You can take an ambiguous problem, form a point of view, and drive it to working software without a spec or a ticket.
- You have opinions about how a security program should run and you are not attached to the way it has always been done.
- You are comfortable building with and around AI: using it as a core part of how you work, and designing systems where agents are first-class actors with controls on what they can do.
- You can talk to product engineers as a peer. They should see you as one of them who happens to know security deeply.
- Staff or principal level expected. Years matter less than what you have built and what you can show us.
- Bachelor's degree in computer science or a related field, or equivalent experience. A strong portfolio of shipped work counts for more than the degree.
- Experience with remote, globally distributed teams. English is the language of all internal communication.
Preferred:
- Experience building a platform, internal product, or developer tool from zero to adopted.
- Startup or founding experience, or a side project you took seriously enough to ship.
- Healthcare, HIPAA, or other regulated-industry context.
- AWS, Kubernetes, and infrastructure as code.
Benefits:
- Unlimited PTO
- Private medical, optical and dental healthcare through AXA
- 5% matched company pension
- Remote working - we have recently secured a small flexible office workspace in London Liverpool Street. Our current expectations are for teams to meet once per month in office; we would still anticipate a remote dominant environment going forward.
- Company equipment (inc. latest laptop) + £500 spending allowance on equipment you can keep.
Product security engineer in London employer: doxy.me
At doxy.me, we pride ourselves on being an exceptional employer that values innovation and collaboration in a fully remote environment. Our commitment to employee growth is reflected in our continuous learning opportunities and supportive work culture, where every team member is empowered to contribute to meaningful projects that enhance privacy and security in healthcare. Join us to be part of a mission-driven team that prioritises your professional development while making a significant impact in the industry.
StudySmarter Expert Advice🤫
We think this is how you could land Product security engineer in London
✨Join Local Tech Meetups
Get out there and mingle with fellow developers by joining local tech meetups. It’s a fantastic way to meet people who might be working at doxy.me or know someone who does. Plus, you can pick up some trendy tech skills and trends while you're at it!
✨Contribute to Open Source Projects
Show off your coding chops by jumping into open-source projects. Not only does this give you practical experience, but it also gets you noticed in the dev community. You'll create a killer portfolio that speaks volumes about your skills to doxy.me.
✨Tap into Online Developer Communities
Don’t underestimate the power of online developer communities like GitHub, Stack Overflow, and even Reddit. Participate in discussions, share your projects, and build your visibility. We can often find opportunities through these channels that can lead to a full-time gig at companies like doxy.me.
✨Explore Job Boards Specifically for Tech Roles
Keep your eyes peeled on job boards that focus on tech roles. Sites like TechCareers or Stack Overflow Jobs can often have listings for companies like doxy.me that might not show up on broader job sites. Make it a habit to check these regularly, and don’t hesitate to apply directly through our website!
We think you need these skills to ace Product security engineer in London
Some tips for your application 🫡
Show off your coding skills:When applying for a software engineering role, it's super important to showcase your coding skills. Make sure your CV includes your tech stack, any relevant programming languages you’re comfortable with, and examples of projects you've worked on. If you have a GitHub profile, link it up! We love to see code in action.
Tailor your portfolio:For a full-time role, we’d expect to see some solid examples of your work in your portfolio. Make sure to include at least two or three projects that highlight your problem-solving skills and your ability to work with different technologies. Focus on the projects that are most relevant to the position at doxy.me.
Craft a killer cover letter:Your cover letter is your chance to stand out—make it personal! Explain why you want to work at doxy.me and how your skills align with the role. Show us your passion for software development. We dig enthusiastic candidates who understand the value of collaboration and continuous learning!
Be clear and concise:When it comes to writing your CV and cover letter, clarity is key. Avoid jargon that could confuse us and stick to simple, direct language. Highlight your achievements with quantifiable results where possible, and keep everything easy to read. A well-organised application goes a long way!
How to prepare for a job interview at doxy.me
✨Brush Up on Your Coding Skills
For a full-time software engineering role, it's crucial that we stay sharp with our coding abilities. Expect technical questions that might involve solving problems on the spot or discussing algorithms. Practise on platforms like LeetCode or HackerRank to get comfortable with the types of questions that often come up.
✨Know Your Tools and Frameworks
Make sure we’re well-acquainted with the tools and technologies listed in the job description. Familiarise ourselves with any specific frameworks or programming languages mentioned. If doxy.me uses React or Node.js, for instance, be ready to discuss how we’ve used them in previous projects or coursework.
✨Showcase Your Projects
Bring along a portfolio that highlights our best work. This could be code samples, GitHub repositories, or any side projects we’ve built. Make sure we can talk through our thought process for each project, especially the challenges we faced and how we solved them—this shows our problem-solving skills in action.
✨Prepare for Behavioural Questions
While technical skills are key, full-time positions also require cultural fit. Be ready to discuss our previous experiences and how we handle teamwork, conflict, and deadlines. Brush up on the STAR method—Situation, Task, Action, Result—to clearly articulate our past experiences when discussing how we've contributed to a team.
