Product Security Engineer in Cambridge

At a glance Location: Cambridge

In-office expectation: Flexible hybrid, once every two weeks

Employment type: Permanent

Salary: £60,000 to £75,000, depending on experience

Why join our Product Security team? You’ll be one of the first people building out Redgate’s product security function, with real influence over how it takes shape rather than joining something already set in stone. This is specialist security work: you’ll be defining standards, governance and practice for engineering teams to work with, not a general engineering delivery role. Security carries real weight here: you’ll have the backing to do the job properly, not just sign off on delivery timelines.

As a Product Security Engineer, you’ll embed security into the software development lifecycle across multiple product teams. You’ll help teams build, ship and operate secure software by defining requirements, improving detection and prevention through SAST and DAST, supporting application security governance and running threat modelling.

Responsibilities

• Partner with engineering and product teams to define and operationalise security requirements across the full SDLC, from design through to release.
• Own or co‑own application security governance, including secure‑by‑default standards, patterns and risk acceptance processes.
• Drive SAST and DAST adoption and quality, from tool tuning through to triage workflows and severity calibration.
• Support threat modelling for new features, architectural changes and high‑risk services, turning findings into actionable engineering work.
• Provide product security guidance for cloud‑native environments, including AWS and containerised workloads.

What makes you a great fit

• Hands‑on product or application security experience within a modern SDLC, including requirements, design review, secure coding guidance and release support.
• Strong knowledge of the OWASP Top 10 and practical mitigation patterns, with experience implementing or improving SAST/DAST processes and reducing false positives.
• Working understanding of cloud and container security in an AWS and Docker environment, and comfort reviewing code across a primarily C# ecosystem.
• Ability to translate security risk into actionable engineering priorities, balancing risk, delivery timelines and operational realities.
• Strong communication skills, with the ability to build trust and influence engineering teams without formal authority, including when requirements or ownership aren’t yet fully defined.

What we offer

• Salary range: £60,000 to £75,000, depending on experience
• Hybrid working: home and Cambridge office
• Monthly wellbeing allowance and generous paid time off
• Genuine investment in learning, development and career progression
• Private health insurance

Belonging at Redgate

We believe that people do their best work in an environment built on respect, fairness and trust, and that diverse perspectives lead to better outcomes. Redgate is an equal opportunity employer, and we make hiring decisions based on skill, potential and alignment with our values.