Senior Product Security Engineer @Blockchain

Overview

The Senior Product Security Engineer role at Blockchain involves operating the Product Security program for blockchain.com’s internally-developed products. This senior, hands-on position focuses on designing secure development lifecycles and leading security initiatives within the organization.

Key Responsibilities

• Act as a senior security engineer for various product lines, owning the security gates for major feature releases.
• Operate and improve the secure development lifecycle, including managing SAST/SCA/DAST and vulnerability triage workflows.
• Research and implement AI tools into the secure development lifecycle.
• Lead threat modeling and architecture reviews for sensitive flows.
• Create and maintain Application Security Standards and compliance-driven secure coding baselines.
• Oversee the Bug Bounty program and manage remediation strategies.
• Conduct deep-dive manual code reviews and mentor engineers on secure coding practices.
• Produce data-driven Security Debt packs and negotiate remediation efforts.
• Define application runtime signals and collaborate with SecOps on log instrumentation.
• Develop and maintain testing automation for business-critical flows.
• Provide Incident Response support as needed and define Product Security metrics.
• Coach junior security engineers and assist in hiring standards development.

Requirements

• 4+ years of security engineering experience, with at least 3+ years in application/product security.
• Experience with Web, Mobile, Cloud, and Infrastructure Pentests.
• Proven record of shipping security automation using tools like CodeQL and Snyk.
• Expertise in auditing Kotlin/Java, TypeScript/JS, and Python.
• Strong experience in threat modeling and architecture guidance for financial flows.
• Excellent stakeholder negotiation skills.

Benefits

• Full-time salary based on experience and equity in the company.
• Mandatory in-office presence four days per week in London, with remote work flexibility for up to 20 days a year.
• Unlimited vacation policy.
• Apple equipment provided.
• Opportunity to grow within a rapidly expanding global technology company.
• Flexible work culture.

Location

This role is primarily based in London, with a mandatory in-office presence four days per week and the option to work remotely from anywhere for up to 20 days per year.

How to Apply

Please visit the Blockchain career page to apply.