Principal Product Security Engineer in London

Principal Product Security Engineer in London

London Full-Time 63000 - 77000 £ / year (est.) On-site
S

At a Glance

  • Tasks: Shape security for our ecommerce platform and solve complex security challenges.
  • Company: Join Storio Group, a leader in innovative ecommerce solutions.
  • Benefits: Enjoy competitive salary, flexible working, and opportunities for professional growth.
  • Other info: Collaborative environment with a focus on AI and continuous improvement.
  • Why this job: Make a real impact on security standards and influence the future of engineering.
  • Qualifications: 5+ years in Product Security or Application Security with strong technical skills.

The predicted salary is between 63000 - 77000 £ per year.

Make Your Mark as a Principal Product Security Engineer at Storio group.

About the role. You will be based in our London office, where you will help shape how security is built into our ecommerce platform and engineering organisation. This is a senior individual contributor role operating at the intersection of Product Security and Application Security. You will work directly with engineers, architects, and product teams to solve complex security problems, influence technical decisions, and make secure-by-design engineering the standard norm. You will have significant autonomy and influence to establish practical security standards, raise security capability across teams, and guide the secure adoption of AI across our engineering ecosystem.

How you embrace curiosity daily. You collaborate closely with engineers, architects, and product teams to turn security challenges into pragmatic solutions. You mentor engineers and Security Champions to make security increasingly embedded within engineering culture. You build and enable security automation that improves security outcomes while reducing friction for engineering teams. You lead threat modelling and security architecture reviews for key products and technology initiatives to identify problems early. You experiment with and adopt AI tools creatively to automate security engineering workflows and boost productivity.

How you make your mark. You define security principles, standards, patterns, and guardrails that enable engineers to build securely at pace. You shape the strategic technical direction of Product Security across our entire platform and engineering organisation. You protect our platform by providing hands-on expertise across APIs, microservices, cloud infrastructure (AWS), authentication, authorisation, and software supply chain security. You identify and mitigate emerging security risks, including those introduced by AI, and communicate potential impact clearly to senior stakeholders. You measure what matters by developing meaningful Product Security metrics to continuously drive security posture improvements.

What you bring to the team. You bring significant (5+ years) experience in Product Security, Application Security, or Security Engineering within a modern software environment. You have strong experience in security architecture and threat modelling, with a proven ability to turn risk into practical engineering solutions. You possess deep technical knowledge of application and API security, secure development practices, modern software architectures, and cloud-native systems. You bring experience embedding security controls into engineering workflows, software supply chains (SBOMs), and the broader software development lifecycle. You are an excellent communicator who builds trust and influences engineers, architects, and senior technical leaders without relying on direct authority. You have experience with, or a strong interest in, AI security and leveraging AI tools to advance security engineering.

What sets you apart. You have hands-on experience with Infrastructure as Code (IaC) security, scaling Security Champions programs, or managing Bug Bounty programs. You hold relevant industry or cloud security certifications (e.g., CISSP, CSSLP, AWS Security Specialty), though we care far more about your practical impact than the certificates you hold.

Principal Product Security Engineer in London employer: Storio group

At Storio Group, we pride ourselves on being an exceptional employer that values creativity and innovation in a collaborative environment. As a Creative Operations Manager, you'll benefit from a culture that encourages professional growth and embraces the latest technologies, including AI-enabled workflows, to enhance efficiency. Located in a vibrant setting, we offer a supportive atmosphere where your contributions directly impact our mission of helping people cherish life's moments.

S

Contact Details:

Storio group Recruitment Team

StudySmarter Expert Advice🤫

We think this is how you could land Principal Product Security Engineer in London

✨Join Local Tech Meetups

Get out there and mingle with fellow developers by joining local tech meetups. It’s a fantastic way to meet people who might be working at Storio group or know someone who does. Plus, you can pick up some trendy tech skills and trends while you're at it!

✨Contribute to Open Source Projects

Show off your coding chops by jumping into open-source projects. Not only does this give you practical experience, but it also gets you noticed in the dev community. You'll create a killer portfolio that speaks volumes about your skills to Storio group.

✨Tap into Online Developer Communities

Don’t underestimate the power of online developer communities like GitHub, Stack Overflow, and even Reddit. Participate in discussions, share your projects, and build your visibility. We can often find opportunities through these channels that can lead to a full-time gig at companies like Storio group.

✨Explore Job Boards Specifically for Tech Roles

Keep your eyes peeled on job boards that focus on tech roles. Sites like TechCareers or Stack Overflow Jobs can often have listings for companies like Storio group that might not show up on broader job sites. Make it a habit to check these regularly, and don’t hesitate to apply directly through our website!

We think you need these skills to ace Principal Product Security Engineer in London

Product Security
Application Security
Security Engineering
Security Architecture
Threat Modelling
API Security
Cloud Infrastructure (AWS)

Some tips for your application 🫡

Show off your coding skills:When applying for a software engineering role, it's super important to showcase your coding skills. Make sure your CV includes your tech stack, any relevant programming languages you’re comfortable with, and examples of projects you've worked on. If you have a GitHub profile, link it up! We love to see code in action.

Tailor your portfolio:For a full-time role, we’d expect to see some solid examples of your work in your portfolio. Make sure to include at least two or three projects that highlight your problem-solving skills and your ability to work with different technologies. Focus on the projects that are most relevant to the position at Storio group.

Craft a killer cover letter:Your cover letter is your chance to stand out—make it personal! Explain why you want to work at Storio group and how your skills align with the role. Show us your passion for software development. We dig enthusiastic candidates who understand the value of collaboration and continuous learning!

Be clear and concise:When it comes to writing your CV and cover letter, clarity is key. Avoid jargon that could confuse us and stick to simple, direct language. Highlight your achievements with quantifiable results where possible, and keep everything easy to read. A well-organised application goes a long way!

How to prepare for a job interview at Storio group

✨Brush Up on Your Coding Skills

For a full-time software engineering role, it's crucial that we stay sharp with our coding abilities. Expect technical questions that might involve solving problems on the spot or discussing algorithms. Practise on platforms like LeetCode or HackerRank to get comfortable with the types of questions that often come up.

✨Know Your Tools and Frameworks

Make sure we’re well-acquainted with the tools and technologies listed in the job description. Familiarise ourselves with any specific frameworks or programming languages mentioned. If Storio group uses React or Node.js, for instance, be ready to discuss how we’ve used them in previous projects or coursework.

✨Showcase Your Projects

Bring along a portfolio that highlights our best work. This could be code samples, GitHub repositories, or any side projects we’ve built. Make sure we can talk through our thought process for each project, especially the challenges we faced and how we solved them—this shows our problem-solving skills in action.

✨Prepare for Behavioural Questions

While technical skills are key, full-time positions also require cultural fit. Be ready to discuss our previous experiences and how we handle teamwork, conflict, and deadlines. Brush up on the STAR method—Situation, Task, Action, Result—to clearly articulate our past experiences when discussing how we've contributed to a team.