Senior Engineer, Product Security

Equal Opportunity Employer
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, or disability status. EEO/Disabled/Vets

About the Job

Senior Engineer, Product Security at News Corp in the Product Security team. You will take a leading role in working with cybersecurity and product engineering teams to ensure our applications are developed securely, manage complex vulnerabilities, and drive the evolution of our security tooling. You will have the chance to work with household names such as The Times, The Sun, talkSPORT, and Virgin Radio. This role is ideal for an experienced security professional capable of providing expert insights and advising on secure architectural design. We are looking for a subject matter expert who lives and breathes cybersecurity, acts as a reliable source of knowledge for product-focused threat intelligence, and proactively promotes security best practices.

About You:

• Expert Security Knowledge: You possess expert capability in identifying, exploiting, and mitigating common vulnerabilities. You can explain complex technical concepts clearly to diverse audiences and set high standards for clarity.
• Secure Architecture Proficiency: You have a deep understanding of secure design principles and can advise on architectural decisions, balancing security needs with business requirements.
• Coding & Integration: Proficiency in tool operation and customisation is required. You are comfortable independently developing and integrating security tools into systems using languages such as Python and Javascript.
• Strategic Problem Solver: You are an expert in problem-solving, capable of verifying complex exploitability and providing strategic solutions to technical challenges.
• Emerging Collaborative Leadership: You drive team alignment through open communication. You are ready to mentor others and champion security initiatives that measurably increase awareness across the organisation.

Responsibilities

• Advanced Tool Engineering: Go beyond standard operation to customise, integrate, and optimise our suite of application security tools (e.g. SAST, SCA, DAST). You will contribute custom rules and plugins to enhance detection capabilities.
• Vulnerability Management & Triage: Act as an expert in vulnerability triage. You will verify complex exploitability, provide guidance on prioritisation to the wider team, and independently resolve intricate technical problems.
• Threat Modelling & Architecture: Develop and refine threat models to improve security posture. You will advise on secure application architecture and provide actionable recommendations to solve challenging design problems.
• Automation & Custom Development: Independently develop and integrate advanced security tools and scripts, championing coding best practices to deliver clean, organised, and sustainable solutions.
• Team & Culture: Foster a culture of security awareness, establishing strong, collaborative relationships with business leadership and key technical stakeholders. Support and share best practices with other product security team members and software developers.