About NothingNothing exists to make tech feel exciting again. We're building a different kind of technology company, one that puts design, emotion, and human creativity at the heart of everything we do. From the way our products look and feel to how we communicate and show up in culture, we believe technology should make you feel something. Backed by GV (Google Ventures), EQT Ventures, and C Ventures, and investors like Tony Fadell (iPod), Casey Neistat, and Kevin Lin (Twitch), we're now sold in 40+ markets with millions of users worldwide. About the TeamNothing builds phones, audio products and an operating system used by millions of people. Behind all of it sits Technology & Data in London: the backend services, cloud platforms and data infrastructure that make our products work. That stack runs across cloud platforms such as AWS, GCP, Azure, and various other global hyperscalers. Standards, tooling, strategies, tactics, architecture: you set them, and the hard part is doing it without slowing anyone down. What You'll DoOwn security lifecycle and secure architecture for Nothing's backend services and cloud platforms, from first design to live operations across all our CI/CD pipelinesDefine our secure development standards and wire SAST, DAST and SBOM tooling into how we ship. Own vulnerability management end to end: find issues, triage findings, and drive engineering teams to closure. Design our security testing, from penetration testing to fuzzing, and build tools other engineers can run without you. Ship network and server-side and data protection: API security, WAF, gateways, runtime defences, encryption in transit and at rest. Partner with our mobile, OS and desktop teams on client-side security tactics and strategy. Collaborate with our privacy and legal functions to help us engineer solutions to our global regulatory requirements focusing on emergent technologies such as AILead threat modelling across authentication, data protection and input handling. Use AI and LLMs to simulate attacks before they happen, then collaborate with the various teams to build the defences. What We're Looking For6+ years in application security, including security architecture you've designed for commercial products and services and have managed the posture of ongoing production. Hands-on cloud security across AWS, GCP, Azure, and other global hyperscalers. Experience applying AI or LLMs to security: simulating threats, probing defences, building countermeasures. You write production-quality code in Python, Go, Java, and C++.London (Kings Cross & Farringdon offices) Working Pattern: Full-time in our London office, five days a week. Occasional home working for personal needs is fine, but this isn't a hybrid role. We ask that you live within a 60-minute commute of your office.
Senior Software Engineer, Security in London employer: Nothing Technology
At Nothing, we pride ourselves on being an innovative employer that champions creativity and collaboration in the heart of London. Our vibrant work culture fosters personal growth and development, offering employees the chance to engage with cutting-edge technology while being part of a dynamic team that values design and emotional connection. With a focus on meaningful work and a supportive environment, we empower our Ecommerce Executives to thrive and contribute to our exciting journey as a global challenger in the tech industry.
