Product Security Engineer @Blockchain

    2 days ago·Blockchain is hiring a Product Security Engineer·📍 United Kingdom

    Overview

    The role of Product Security Engineer at Blockchain involves managing the Product Security program for the company's internally-developed products across various lines. It is a senior, hands-on position focused on integrating security in the development lifecycle to protect high transaction volumes.

    Key Responsibilities

    • Act as a senior security engineer, ensuring security integration from the design phase for major feature releases.
    • Operate and improve the secure development lifecycle, including orchestrating SAST/SCA/DAST and streamlining vulnerability triage workflows.
    • Research and embed AI utilities and Large Language Model (LLM) agents into secure development processes.
    • Lead threat modeling and architecture reviews for sensitive flows.
    • Translate technical risks into clear security policies and maintain Application Security Standards.
    • Oversee the technical triage and remediation strategy for the Bug Bounty program.
    • Conduct manual and automated code reviews, mentoring engineers on secure coding practices.
    • Manage Security Debt negotiation and integration into engineering roadmaps.
    • Define application runtime signals and work with SecOps for log instrumentation.
    • Build and maintain product-level test harnesses to prevent regressions.
    • Provide expertise in Incident Response, including test forensic runbooks.
    • Define and own Product Security metrics, translating them into risk reports.
    • Coach junior engineers and assist in defining hiring standards for the Product Security team.

    Requirements

    • 4+ years of security engineering experience, with at least 3+ years in application/product security.
    • Experience with Web, Mobile, Cloud, and Infrastructure Pentests.
    • Proven track record of shipping security automation using relevant tools.
    • Expertise in auditing Kotlin/Java, TypeScript/JS, Python, and familiarity with containerized deployments.
    • Strong threat modeling experience for financial flows.
    • Excellent negotiation and stakeholder management skills.

    Benefits

    • Full-time salary based on experience with equity options.
    • Work from anywhere for up to 20 days per year.
    • Unlimited vacation policy.
    • Apple equipment provided.
    • Opportunities for career advancement in a global technology company.
    • Flexible work culture.

    Location

    This role requires a mandatory in-office presence four days per week in London.

    How to Apply

    Interested candidates should apply through the company's career page.

    Get jobs in your inbox

    Join over 10,000 subscribers receiving our weekly newsletter.