Sr Software Security Engineer (Remote from United Kingdom)

This position is for a Sr Software Security Engineer in the United Kingdom. The Senior Software Security Engineer will lead the development and execution of application and software security programs, ensuring secure software delivery across the engineering organization. You will act as both a builder and defender, designing preventative controls, internal tools, and frameworks that embed security into the software development lifecycle. The role requires a balance of technical judgment, threat awareness, and collaboration with engineering teams to proactively manage risks while supporting rapid product delivery. You will influence security strategy, lead automation efforts for threat detection and response, and mentor teams on secure coding practices. This position offers the opportunity to shape organisational security posture in a fast-growing, remote-friendly environment with high autonomy and impact.

Accountabilities

• Own and evolve secure SDLC strategy, defining security standards from design to deployment.
• Implement automated security guardrails in CI/CD pipelines to detect vulnerabilities, misconfigurations, and dependency risks.
• Lead vulnerability management efforts, designing durable fixes and reusable security patterns in collaboration with engineers.
• Build and maintain internal security tooling, platforms, and frameworks focused on automation, scalability, and developer experience.
• Develop threat detection and response automation, including playbooks, escalation processes, and security monitoring.
• Act as a trusted advisor to engineering and product teams, providing guidance on secure design, architecture, and risk-based decisions.
• Deliver security training, awareness programs, and role-specific guidance to embed security into everyday engineering practices.

Requirements

• 5+ years of experience in Software Engineering or Security Engineering with senior-level impact across multiple systems or teams.
• Strong proficiency in at least one modern programming language (e.g., Python, Go, Node.js), emphasizing maintainable, production-quality systems.
• Deep understanding of common application security vulnerabilities (e.g., OWASP Top 10) and ability to communicate risks effectively to engineers.
• Experience with Linux, containers/Kubernetes, and infrastructure as code in at least one major cloud platform (AWS, GCP, or Azure).
• Hands-on experience leading threat detection, response, and security automation initiatives.
• Proven ability to collaborate across engineering, product, and security teams to influence outcomes.
• Strong problem-solving, analytical, and communication skills, with a proactive approach to security challenges.

Preferred Qualifications

• Experience defining and tracking security metrics and dashboards to measure program effectiveness.
• Prior experience in remote environments and/or pre-IPO startups.
• Familiarity with Go, Node.js + Express, React, JS, Python, Postgres, Kafka, MySQL, Redis, and APIs (REST/gRPC).

Benefits

• Competitive compensation range: €75,000 – €100,000, adjusted based on experience and market.
• Fully remote work with global flexibility.
• Equity participation or stock options.
• Comprehensive health benefits.
• Professional growth opportunities through training, mentorship, and conferences.
• Inclusive, supportive, and collaborative culture.
• Work in a fast-paced, high-impact environment alongside industry experts.