Senior Product Security Engineer

Description

The company is an AI platform for market intelligence and workflow automation, used by thousands of large organisations in business and finance to make faster, better-informed decisions.

It combines domain-specific AI with a content library of over 500 million premium business documents, including equity research, earnings calls, expert interviews, filings, news and internal proprietary content.

The product line includes Generative Search, Generative Grid and Deep Research.

The team is building the security function for the platform's AI-native products, so this role leads the design of secure, scalable and trustworthy software and works with architects, engineers and product managers from the earliest design stages.

Responsibilities

• Design and enforce security controls for AI and ML systems, covering model training, data pipelines, inference environments and agentic workflows (30% of the role).
• Find and reduce AI-specific attacks such as prompt injection, data poisoning, model inversion and model theft.
• Build controls for model provenance, integrity and auditability so AI operations are secure and accountable.
• Work with governance and compliance teams to map AI security to NIST AI RMF and the EU AI Act.
• Build security into the software and AI development lifecycle with architects, engineers and product teams across the application and cloud estate (30% of the role).
• Make sure security, privacy and compliance are considered in the design from the start.
• Write and maintain secure development standards, guidance and good practice.
• Lead threat modelling, secure design reviews and risk assessments throughout the development lifecycle (20%).
• Build and maintain security automation and governance that fits into developer workflows.
• Write customer-facing security material, including questionnaire answers, security whitepapers and trust documents, to help close enterprise deals (10%).
• Speak for product security in customer, cross-functional and leadership meetings.
• Coach teams on secure coding, AI risk management and secure design (10%).
• Encourage a security-first culture through advocacy, documentation and training.

Requirements

• 5, 7+ years in product, application or cloud security engineering.
• Deep knowledge of secure SDLC, threat modelling and secure architecture.
• Able to read and review code to support threat models and design reviews.
• Experience securing AI and ML pipelines, data workflows and model-serving infrastructure, with working knowledge of AI and LLM security, including prompt injection, model integrity and provenance.
• Proven expertise in cloud security across multiple cloud environments.
• Familiarity with DevSecOps and CI/CD environments.
• Familiarity with encryption basics: symmetric and asymmetric cryptography, TLS and mTLS, key management and secrets handling.
• Understanding of authentication and authorisation in modern applications, including OAuth 2.0, OIDC, SAML, RBAC and ABAC.
• Track record of leading cross-functional security work with engineering, product and compliance, building security into roadmaps, shaping architecture decisions and aligning stakeholders.
• Proficiency in Python, Java and/or JavaScript for security automation and tooling.
• Container and orchestration security, including Kubernetes runtime protection.
• Software supply chain security and artifact integrity verification.
• Experience running bug bounty programmes: triaging findings, running root-cause analysis and turning results into lasting security improvements.
• Familiarity with compliance and governance frameworks such as SOC 2, ISO 27001, NIST 800-53 and NIST AI RMF.
• Certifications such as CKS, CISSP, CSSLP or AI/ML security credentials are a plus.

Conditions

Base salary range is £90,000 - £122,000 GBP.

Pay is set from standard ranges for each function and level, benchmarked against similar growth-stage companies and internal peers, and shared on all postings wherever the hire is based. Final offers depend on factors including experience and expertise and may fall outside this range.

The company is an equal-opportunity employer and does not discriminate on any basis protected by law.

Be wary of fake job offers or recruiters impersonating the company. The company never asks candidates to pay for applications, equipment or training, and official messages come from an @ the company's site address. Check doubtful listings on the careers page.

Benefits

• Work on hard security problems at a fast-growing company.
• Help shape the product security strategy.
• Join a collaborative engineering team with a strong security mindset.
• Competitive pay, benefits and career development.
• You may also be offered a performance bonus, equity and a generous benefits package.