Overview
The role of Product Security Engineer at Blockchain involves managing the Product Security program for the company's internally-developed products across various lines. It is a senior, hands-on position focused on integrating security in the development lifecycle to protect high transaction volumes.
Key Responsibilities
- Act as a senior security engineer, ensuring security integration from the design phase for major feature releases.
- Operate and improve the secure development lifecycle, including orchestrating SAST/SCA/DAST and streamlining vulnerability triage workflows.
- Research and embed AI utilities and Large Language Model (LLM) agents into secure development processes.
- Lead threat modeling and architecture reviews for sensitive flows.
- Translate technical risks into clear security policies and maintain Application Security Standards.
- Oversee the technical triage and remediation strategy for the Bug Bounty program.
- Conduct manual and automated code reviews, mentoring engineers on secure coding practices.
- Manage Security Debt negotiation and integration into engineering roadmaps.
- Define application runtime signals and work with SecOps for log instrumentation.
- Build and maintain product-level test harnesses to prevent regressions.
- Provide expertise in Incident Response, including test forensic runbooks.
- Define and own Product Security metrics, translating them into risk reports.
- Coach junior engineers and assist in defining hiring standards for the Product Security team.
Requirements
- 4+ years of security engineering experience, with at least 3+ years in application/product security.
- Experience with Web, Mobile, Cloud, and Infrastructure Pentests.
- Proven track record of shipping security automation using relevant tools.
- Expertise in auditing Kotlin/Java, TypeScript/JS, Python, and familiarity with containerized deployments.
- Strong threat modeling experience for financial flows.
- Excellent negotiation and stakeholder management skills.
Benefits
- Full-time salary based on experience with equity options.
- Work from anywhere for up to 20 days per year.
- Unlimited vacation policy.
- Apple equipment provided.
- Opportunities for career advancement in a global technology company.
- Flexible work culture.
Location
This role requires a mandatory in-office presence four days per week in London.
How to Apply
Interested candidates should apply through the company's career page.