software engineer

ai engineer

machine learning engineer

senior software engineer

full stack engineer

product security engineer

Blockchain

<div><div>Blockchain is connecting the world to the future of finance. As the most trusted and fastest-growing global crypto company, it helps millions of people worldwide safely access cryptocurrency. Since its inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.</div>
You will operate the Product Security programe for Blockchain.com's internally-developed products across Consumer, OTC and MRE lines. This is a senior, hands-on role: you'll design and run the secure development lifecycle, lead threat modeling and architecture review, own the security debt lifecycle for product engineering teams, and architect the automated pipelines that protect billions in transaction volume. You will embed with product and engineering teams, convert technical findings into business-prioritized remediation, and lift developer capabilities so security is delivered by code and process.

WHAT YOU WILL DO
<ul>
<li>Strategic Security Partnership: Act as a senior security engineer for the different product lines like Consumer, OTC. You will own the security gates for major feature releases and ensure security is integrated from the design phase.</li>
<li>Secure SDLC Operator: Operate and improve the secure development lifecycle. This includes orchestrating SAST/SCA/DAST, streamlining SARIF ingestion, PR review standards, CI/CD security automation, and vulnerability triage workflows.</li>
<li>AI-Driven SDLC Innovation: Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into our secure development lifecycle.</li>
<li>Threat Modelling &amp; Architecture Reviews: Lead STRIDE/attack-tree threat models for sensitive flows including authentication, payment, custody, reconciliation and sign off on security architecture for critical designs.</li>
<li>Product Security Governance &amp; Standards: Translate technical risks and regulatory demands into clear security policies. You will own the creation and upkeep of our Application Security Standards, reference architectures, and compliance-driven secure coding baselines.</li>
<li>Bug Bounty Leadership: Oversee the technical triage and remediation strategy for our Bug Bounty program. You will turn external researcher findings into internal architectural hardening projects.</li>
<li>Release Reviews: Perform deep-dive manual code reviews of security-sensitive Pull Requests, mentor engineers on secure coding patterns, and provide pragmatic remediation guidance.</li>
<li>Advanced Code Auditing: Conduct deep-dive manual and automated code reviews on highly sensitive Java and Kotlin backend Pull Requests.</li>
<li>Security Debt &amp; Remediation Negotiation: Produce data-driven Security Debt packs and negotiate remediation into engineering roadmaps. You will negotiate remediation timelines with Product Owners and Engineering leadership, backed by risk-based data.</li>
<li>Detection &amp; Telemetry Integration: Define application runtime signals (business-logic anomalies, auth anomalies, reconciliation mismatches) and work with SecOps to instrument logs and alerts.</li>
<li>Testing &amp; Automation: Build and maintain product-level test harnesses, fuzzing/property tests and CI checks to prevent regressions for business-critical flows.</li>
<li>Incident Response Support: Provide product-level Incident Response expertise like test forensic runbooks, support reproduction of payment/settlement incidents, and advise on containment/remediation whenever needed.</li>
<li>Metrics &amp; Risk Visibility: Define and own the Product Security metrics (e.g., MTTR for critical vulnerabilities, security debt burn-down, and defect density). You will translate these KPIs into high-level risk reports for the Head of Security and Engineering leadership to drive data-backed resourcing decisions.</li>
<li>People &amp; Process: Coach junior product security engineers and security champions. You will assist the Product Security Lead to define hiring standards and capability plans.</li>
</ul>
WHAT YOU WILL NEED

Must-Haves
<ul>
<li>4+ years total security engineering experience with at least 3+ years focused specially in application/product security or equivalent.</li>
<li>Experience with Web, Mobile, Cloud, Infrastructure Pentests and Red Teaming (e.g., phishing)</li>
<li>Proven track record of shipping security automation using CodeQL/GHAS, Snyk, or similar. You should be intimately familiar with the SARIF ecosystem and ASPM workflows.</li>
<li>Expert-level ability to audit and propose fixes in Kotlin/Java, TypeScript/JS, Python, and familiarity with containerised deployments (Kubernetes).</li>
<li>Strong threat modeling experience and pragmatic architecture guidance for high-stakes financial flows (AuthN/AuthZ, Cryptography, Payments).</li>
<li>Experience building CI checks, test harnesses and lightweight fuzzing/property tests.</li>
<li>Excellent stakeholder skills &mdash; able to negotiate remediation with Engineering Directors and Product owners, balancing security requirements with business velocity.</li>
</ul>
Nice-to-haves
<ul>
<li>Prior fintech/Trading/OTC product security experience or familiarity with custody/signing patterns.</li>
<li>Practical experience designing or deploying AI-assisted security tooling, leveraging LLMs for automated software patch generation, or evaluating vulnerability detection agents within enterprise developer pipelines.</li>
<li>Prior experience operating alongside GRC frameworks, authoring developer-facing security policies from scratch, and building automated policy-as-code gateway integrations.</li>
<li>Public track record of CVEs, security research, or open-source contributions to security tooling.</li>
<li>Advanced credentials such as OSCP, OSWE, CISSP or equivalent.</li>
<li>Experience with on-chain/off-chain integration, payment reconciliation, or smart contract security.</li>
<li>Familiarity with vulnerability management platforms (DefectDojo, Dependabot orchestration) and GRC/Gateway integrations.</li>
<li>Prior contributions to security automation and developer tooling (open source or internal).</li>
</ul>
COMPENSATION &amp; PERKS
<ul>
<li>Full-time salary based on experience and meaningful equity in an industry-leading company</li>
<li>This is a role based in our London office, with a mandatory in-office presence four days per week.</li>
<li>Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.</li>
<li>ClassPass</li>
<li>Unlimited vacation policy; work hard and take time when you need it</li>
<li>Apple equipment</li>
<li>The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field</li>
<li>Flexible work culture</li>
</ul><div>
Blockchain is committed to diversity and inclusion in the workplace and is proud to be an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, religion, color, national origin, gender, gender expression, sex, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, and apprenticeship. Blockchain makes hiring decisions based solely on qualifications, merit, and business needs at the time.

You may contact our Data Protection Officer by email at dpo@blockchain.com. Your personal data will be processed for the purposes of managing Controller's recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.

Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller's behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under the standard contractual clauses.

Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have the right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.</div></div>

Senior Product Security Engineer

Data Idols

<div><h2 class="jobSectionHeader">Staff Security Engineer</h2>

Salary: Up to &pound;150,000 + Benefits

Location: London (Hybrid &ndash; 3 days per week in the office)

We are currently looking for a Staff Security Engineer to join a fast-growing, innovative technology business operating at the forefront of AI and data-driven products. This is an exciting opportunity to join a highly collaborative, engineering-led environment where security is viewed as a key enabler of innovation. Reporting to the Head of Engineering, the Staff Security Engineer will play a pivotal role in shaping the organisation&rsquo;s security posture, working closely with software engineers, platform teams and technical leadership to embed security throughout the software development lifecycle.

This is not a traditional SOC or operational security position. Instead, the Security Engineer will focus on securing applications, cloud infrastructure and development practices, helping the business build secure products at scale whilst influencing security strategy across the wider organisation.
<h2 class="jobSectionHeader">
The Opportunity</h2>

As the Staff Security Engineer, you&rsquo;ll work at the intersection of software engineering, cloud infrastructure and cyber security, helping to build and maintain a secure-by-design culture across the business.

Key responsibilities include:
<ul>
<li>Driving application and product security initiatives across multiple engineering teams</li>
<li>Conducting security reviews, threat modelling and risk assessments</li>
<li>Implementing and improving vulnerability management processes</li>
<li>Embedding security tooling into CI/CD pipelines and development workflows</li>
<li>Partnering with developers to promote secure coding practices</li>
<li>Reviewing cloud infrastructure and architecture from a security perspective</li>
<li>Supporting incident response and remediation activities when required</li>
<li>Defining and promoting security standards, policies and best practices</li>
<li>Influencing technical decision-making across engineering and leadership teams</li>
</ul>
This role offers the opportunity to make a genuine impact within a growing technology organisation where security is a strategic priority rather than an afterthought.
<h2 class="jobSectionHeader">
What&rsquo;s in it for you?</h2>
<ul><li>Salary up to &pound;150,000</li>
<li>Hybrid working model</li>
<li>Opportunity to work on cutting-edge AI and technology products</li>
<li>High level of autonomy and influence</li>
<li>Collaborative engineering culture</li>
<li>Career progression opportunities as the business continues to scale</li>
<li>Ongoing learning and professional development</li>
<li>Pension scheme</li>
<li>Generous holiday allowance</li>
</ul><h2 class="jobSectionHeader">Skills and Experience</h2>
<ul><li>Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer</li>
<li>Strong understanding of application security principles and secure software development practices</li>
<li>Experience working closely with software engineering teams</li>
<li>Hands-on experience securing cloud environments (AWS, GCP or Azure)</li>
<li>Experience with vulnerability management, threat modelling and security reviews</li>
<li>Knowledge of CI/CD security and modern development practices</li>
<li>Excellent stakeholder management and communication skills</li>
</ul><h3 class="jobSectionHeader">Eligibility</h3>

Please note that candidates must have full, unrestricted right to work in the UK. Unfortunately, sponsorship is not available for this position.

If you would like to be considered for the role and feel you would be an ideal fit, please submit your CV by clicking the Apply button below.</div><div></div>

Staff Security Engineer

<div><h2 class="jobSectionHeader">Lead Software Security Engineer</h2>

Salary: Up to &pound;150,000 + Benefits

Location: London (Hybrid &ndash; 3 days per week in the office)

We are currently looking for a Lead Software Security Engineer to join a fast-growing, innovative technology business operating at the forefront of AI and data-driven products. This is an exciting opportunity to join a highly collaborative, engineering-led environment where security is viewed as a key enabler of innovation. Reporting to the Head of Engineering, the Lead Security Engineer will play a pivotal role in shaping the organisation&rsquo;s security posture, working closely with software engineers, platform teams and technical leadership to embed security throughout the software development lifecycle.

This is not a traditional SOC or operational security position. Instead, the Security Engineer will focus on securing applications, cloud infrastructure and development practices, helping the business build secure products at scale whilst influencing security strategy across the wider organisation.
<h2 class="jobSectionHeader">
The Opportunity</h2>

As the Lead Security Engineer, you&rsquo;ll work at the intersection of software engineering, cloud infrastructure and cyber security, helping to build and maintain a secure-by-design culture across the business.

Key responsibilities include:
<ul>
<li>Driving application and product security initiatives across multiple engineering teams</li>
<li>Conducting security reviews, threat modelling and risk assessments</li>
<li>Implementing and improving vulnerability management processes</li>
<li>Embedding security tooling into CI/CD pipelines and development workflows</li>
<li>Partnering with developers to promote secure coding practices</li>
<li>Reviewing cloud infrastructure and architecture from a security perspective</li>
<li>Supporting incident response and remediation activities when required</li>
<li>Defining and promoting security standards, policies and best practices</li>
<li>Influencing technical decision-making across engineering and leadership teams</li>
</ul>
This role offers the opportunity to make a genuine impact within a growing technology organisation where security is a strategic priority rather than an afterthought.
<h2 class="jobSectionHeader">
What&rsquo;s in it for you?</h2>
<ul><li>Salary up to &pound;150,000</li>
<li>Hybrid working model</li>
<li>Opportunity to work on cutting-edge AI and technology products</li>
<li>High level of autonomy and influence</li>
<li>Collaborative engineering culture</li>
<li>Career progression opportunities as the business continues to scale</li>
<li>Ongoing learning and professional development</li>
<li>Pension scheme</li>
<li>Generous holiday allowance</li>
</ul><h2 class="jobSectionHeader">Skills and Experience</h2>
<ul><li>Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer</li>
<li>Strong understanding of application security principles and secure software development practices</li>
<li>Experience working closely with software engineering teams</li>
<li>Hands-on experience securing cloud environments (AWS, GCP or Azure)</li>
<li>Experience with vulnerability management, threat modelling and security reviews</li>
<li>Knowledge of CI/CD security and modern development practices</li>
<li>Excellent stakeholder management and communication skills</li>
</ul><h3 class="jobSectionHeader">Eligibility</h3>

Please note that candidates must have full, unrestricted right to work in the UK. Unfortunately, sponsorship is not available for this position.

If you would like to be considered for the role and feel you would be an ideal fit, please submit your CV by clicking the Apply button below.</div><div></div>

Lead Software Security Engineer

Harmonic Security

<div>AI is being run everywhere, by humans and agents. Harmonic Security governs all of it. The AI Governance and Control (AIGC) platform understands user / agent intent and data context in real time, giving security teams visibility and control across every tool and workflow so companies can move faster with AI while minimizing risk.
We operate in one of the fastest-moving spaces in tech: the emerging intersection of AI and cybersecurity. It's a market still being defined, and we're among the first to build natively for it - protecting sensitive data in real time, at the endpoint, with minimal friction for the teams using it. Enterprises get full visibility and control. Their people get to innovate without guardrails slowing them down.
Named to the Rising in Cyber 2026 list, Harmonic is gaining serious recognition and serious traction. We're led by deep cybersecurity expertise and backed by investors who know the space: N47, Ten Eleven Ventures, and In-Q-Tel.
As AI adoption inside the enterprise accelerates, the ability to safely observe, control, and enforce policy in real time isn't a nice-to-have. It's mission-critical infrastructure. That's what we build.<h2 class="jobSectionHeader">
How We Work: AI-First by Design</h2>
Harmonic exists to help enterprises adopt AI safely and at scale. We hold ourselves to the same standard. Everyone at Harmonic actively uses AI tools to do their best work, from research and writing to building processes and automating workflows. We expect every new hire to bring curiosity about AI and a willingness to use it to work smarter, faster, and more creatively. For some roles, that means tinkering and staying open to new tools. For others, it means building entirely new systems with AI at the core. We'll be clear about what we expect for each role, and we'll give you the tools and support to get there.<h2 class="jobSectionHeader">
About the Team</h2>
The Security &amp; TechOps team builds the systems, tooling, and research that keep Harmonic secure, trusted, and able to move fast. We work across the entire lifecycle of how the company operates-from how we build software, to how we detect threats, to how we prove our security posture to customers, to how employees use the technology that powers their work.
We focus on enabling speed without sacrificing safety. That means creating secure-by-default engineering practices, building automation and detections that reduce manual work, researching emerging AI security risks, running assurance programmes like SOC 2 and ISO 27001, and shaping the internal platforms that help teams work efficiently and securely.
We&rsquo;re a hands-on, engineering-first group. We avoid box-ticking and heavy process in favour of practical solutions, strong automation, and constant improvement. We collaborate closely across functions, operate with high ownership, and support each other through rapid growth. Our shared goal is to build the trust, systems, and capabilities that let Harmonic innovate confidently and at scale.<h2 class="jobSectionHeader">
About the Role</h2>
Our goal is simple: enable engineering teams to move fast and ship securely. We do this by creating the tools, standards, and systems that make secure development seamless. Whether it&rsquo;s hardening pipelines, tuning detection tooling, or staying ahead of emerging AI risks, we build the connective tissue that keeps Harmonic&rsquo;s products secure and trusted.
This team operates at the heart of our engineering culture - hands-on, collaborative, and pragmatic. We bridge the gap between security and development, helping both move faster and with more confidence.
We&rsquo;re looking for a Staff Security Engineer, Product to shape how Harmonic builds secure products from the start. You&rsquo;ll lead the creation of tools, standards, and practices that make secure development part of our everyday engineering workflow.
You&rsquo;ll work closely with Engineering and DevOps to integrate security into design, build, and deployment. From managing code scanning and vulnerability tooling to supporting product pen tests and monitoring AI-related risks, you&rsquo;ll help teams ship fast and safely while building lasting confidence in our products.<h2 class="jobSectionHeader">
What You&rsquo;ll Do</h2><ul><li>
Act as the security partner to engineering - helping teams design, build, and ship securely without slowing down development.</li><li>
Drive and maintain the tooling that underpins product security - from code scanning and vulnerability detection to CI/CD hardening and reporting.</li><li>
Keep a close eye on our own AI systems and tools - monitoring emerging threats and ensuring our AI security posture evolves with the field.</li><li>
Lead threat modelling across the product - running structured STRIDE and LINDDUN assessments on new features and system designs, building repeatable templates, and using AI tooling to make it faster and more scalable. The goal is making threat modelling a normal part of how we build, not a separate event.</li><li>
Use AI to build and scale the product security function - integrating tools like Claude Code into security workflows, from automated threat modelling to building internal security tooling. A high-performing programme, not necessarily a large one.</li></ul><h2 class="jobSectionHeader">
What You Bring</h2><ul><li>
Demonstrable software engineering experience in programming, application design and SLDC.</li><li>
Proven experience as a Product or Application Security Engineer in a modern engineering environment - you understand how products are built and shipped.</li><li>
Curiosity for emerging threats, especially around AI and ML systems, and a drive to keep our defences one step ahead.</li><li>
Excellent communicator who can translate between engineering, security, and go-to-market teams - clear, direct, and grounded in technical reality.</li><li>
Hands-on experience with structured threat modelling, including both security and privacy threat modelling methodologies (e.g. STRIDE, LINDDUN).</li><li>
Strong Claude Code or equivalent AI coding agent experience. Demonstrated use of agentic AI to build, automate, and accelerate security engineering work. This is a must-have.</li></ul><h2 class="jobSectionHeader">
You Might Be a Fit If You</h2><ul><li>
Like working closely with engineering teams to embed security into everyday development without slowing them down.</li><li>
Enjoy building and tuning security tools, pipelines, and dashboards that give developers useful signal - not noise.</li><li>
Can translate complex security risks into clear, actionable guidance for engineers and product teams.</li><li>
Want to shape how secure development happens in a high-growth, modern engineering organisation.</li><li>
Reach for Claude Code as a first instinct when building or automating something, and want to apply that to building a product security function that punches well above its weight</li></ul><h2 class="jobSectionHeader">
Why Join Us</h2>
This isn&rsquo;t just a job; it&rsquo;s an opportunity to be part of a team that is redefining cybersecurity. We believe today&rsquo;s talent is tomorrow&rsquo;s success, and we&rsquo;re committed to creating an environment where you can do the best work of your life.<ul><li>
Competitive pay and meaningful equity with a direct stake in Harmonic&rsquo;s success</li><li>
Comprehensive benefits, pension plan, generous PTO, and flexible hybrid work</li><li>
A small, passionate team that values transparency, creativity, and learning</li><li>
Thoughtful leadership that cares deeply about growth, impact, and people</li><li>
Annual global off-sites (past trips include Lisbon and Nashville)</li><li>
The chance to directly shape both our product and our culture as we build a category-defining company</li></ul><h2 class="jobSectionHeader">
Harmonic's Core Values</h2><div>
</div><h3 class="jobSectionHeader">
Flourish in the Unknown</h3>
We embrace new, unfamiliar situations that require initiative and rapid decision-making. We orient ourselves quickly and deliver results with minimal guidance.<div> 
</div><h3 class="jobSectionHeader">
Never Full</h3>
We raise our hands, take on challenges, and assist others whenever possible. We hunger for opportunities to learn and do more.<div> 
</div><h3 class="jobSectionHeader">
Perfect Harmony</h3>
We support one another to create cohesion and unity. We collaborate openly, share feedback honestly, and help everyone produce their best work.
Compensation Range: &pound;125K - &pound;135K</div>

Staff Security Engineer, Product

Cognism

<div><div><h2 class="jobSectionHeader">WHO ARE WE</h2>

Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</div>
THE ROLE

The Senior Application Security Engineer is a key member of Cognism's Information Security Team, reporting into the Application &amp; Infrastructure Security Manager. Your mission is to embed security by design across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path.

You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception &ndash; all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day.

This role is ideal for a senior IC who is technical, collaborative, and pragmatic, with the ability to influence engineering teams while driving hands on improvements to Cognism's secure SDLC.

KEY RESPONSIBILITIES

Security by Design &amp; Product Integration
<ul>
<li>Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.</li>
<li>Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.</li>
<li>Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning.</li>
</ul>
Application Risk Assessment &amp; AI Security
<ul>
<li>Identify and assess application risks across Cognism's SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.</li>
<li>Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.</li>
<li>Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets.</li>
</ul>
Secure SDLC &amp; DevSecOps Enablement
<ul>
<li>Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.</li>
<li>Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).</li>
<li>Drive automation and developer-friendly security processes that minimize friction and support rapid delivery.</li>
</ul>
Threat Modelling &amp; Architecture Support
<ul>
<li>Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.</li>
<li>Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.</li>
<li>Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.</li>
<li>Maintain and expand Cognism's secure coding standards, guidance, and reusable security patterns.</li>
</ul>
Application Security Testing &amp; Engineering
<ul>
<li>Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.</li>
<li>Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.</li>
<li>Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies.</li>
</ul>
Collaboration, Education &amp; Influence
<ul>
<li>Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape.</li>
<li>Deliver security training, workshops, and guidance to improve engineering teams' security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders.</li>
</ul>
CORE COMPETENCIES
<ul>
<li>Strong technical depth in application security, cloud security, and secure development.</li>
<li>Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.</li>
<li>Deep understanding of communication protocols used for web development is a must-have.</li>
<li>Hands on experience with web application development, specifically for back-end development is a must-have competency.</li>
<li>Risk-Based Prioritization: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a &quot;risk-driven&quot; rather than &quot;compliance-driven&quot; mindset. Comfortable balancing security risk with product and commercial realities.</li>
<li>Contextual Communication: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners.</li>
<li>Collaborative Conflict Resolution: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience. Pragmatic problem solver with a growth mindset and bias toward action.</li>
<li>Architectural Empathy: Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles.</li>
</ul>
EDUCATION &amp; EXPERIENCE
<ul>
<li>5&ndash;10+ years of experience in Application Security, Product Security, or Security Engineering roles.</li>
<li>Strong experience securing cloud native SaaS platforms (AWS preferred) and Data pipelines.</li>
<li>Handson experience with secure coding, application testing, and CI/CD security automation.</li>
<li>Experience working closely with engineering and product teams in agile environments.</li>
<li>Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.</li>
<li>Experience evaluating and securing AI/ML enabled features is a strong advantage.</li>
<li>Experience in SME or high-growth SaaS environments preferred.</li>
</ul><div>
<h2 class="jobSectionHeader">WHY COGNISM</h2>

At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who support, challenge, and inspire each other every day. If you're looking for a place where your work truly makes an impact, you're in the right spot!

Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.

Here's what we stand for:

 We Own the Outcome Together. 
 We Deeply Understand our Customers. 
 We Celebrate Impact Wherever It Comes From.

At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</div></div>

Senior Application Security Engineer

Voxquill

<div>I'm looking for our founding engineer!
 
The person who takes a live, paying fintech product and makes it truly ours.
We build receipt-and-proof automation for the self-employed: the app quietly finds your receipts (email, bank feeds, camera roll, texts), sorts them, matches them to your bank transactions, and produces accountant-ready exports. It's live on iOS and Android, it's SOC 2 certified, and people are paying for it. The model works.
I need one person who treats this codebase as theirs, ships fast, and owns the platform end-to-end. This is a founding engineer role with a real path to CTO.
Your first job is to take the keys.
 
Move the platform off the agency's Azure into ours, take custody of production, and the headline deliverable.
 
Build the automated test suite this codebase never had, with a CI/CD pipeline where a green build genuinely means &quot;safe to ship.&quot; Then you own the roadmap.
How we build matters as much as what we build.
 
We are not rebuilding an IT shop of tickets and manual QA.
 
Terrapin runs as an AI-native pod: Claude Code and agents do the repetitive work and produce tested, PR-ready changes; you own architecture, review, security, and the hard 20%.
 
AI gives you the velocity, your tests and pipeline are what keep that velocity from turning into breakage!
We want to ship multiple times a week and almost never break anything, and hold our SOC 2 line the whole way. If that model excites you rather than worries you, you're the person.
This is genuinely full-stack.
 
Strong .NET / C# backend on Azure, real ownership of infra, security, and DevOps, and polished mobile (React Native + Expo, iOS and Android); Because the app is the product. Testing isn't someone else's job here. It's the core discipline.
The kind of person whose teammates would describe as:<ul><li>
an owner, not a ticket-taker</li><li>
obsessive about shipping quality fast</li><li>
calm owning production for a product with real money moving through it</li><li>
someone who builds automation instead of doing the same thing twice</li><li>
security-minded by instinct, not as an afterthought</li></ul>
What you'd bring:<ul><li>
Senior+ .NET / C# backend, PostgreSQL, solid API design</li><li>
Real Azure ownership: App Services, networking, Key Vault, identity, CI/CD (Azure DevOps or similar)</li><li>
Strong React Native + Expo mobile, with genuine UI/UX taste</li><li>
Test automation and CI/CD as a way of life &mdash; you write the tests with the code</li><li>
Hands-on building with Claude Code / agent tooling, and doing it safely in a SOC 2 world</li></ul>
Bonus points: fintech / payments background, Plaid experience, or applied LLM work.
And the reason the right engineer will actually stay: receipts are just the wedge. We're building toward a verifiable, tamper-evident record of an economic event. Proof that banks, insurers, and AI agents can consume directly. Stripe is a payment rails. We're building proof rails.
You'd work directly with me every day &mdash; 18+ years in fintech and payments, two exits behind me &mdash; so you own the engineering but never carry the hard architecture, security, or product calls alone.
The details:
 
UK or EU-remote(temporarily), with solid overlap to UK hours and business trips.
We're genuinely open to strong candidates across both. Being open to relocating to the UK down the line is a plus, but not a day-one requirement.
 
Competitive base plus real founding-level equity.
One hard line: you build quality in through tests and CI/CD. We're deliberately leaving the manual-testing, hope-it-works world behind, and a dev who treats testing as optional isn't the hire. Everything else, we can talk about.
If you want founder-level ownership, a CTO trajectory, and an AI-native way of building, and owning a live fintech platform from week one lights you up, let's talk.
Apply and tell me about something you shipped that you're proud of, and one thing you broke and how you made sure it never happened again.</div>

Founding Engineer (Full Stack); Patch to CTO

HOMETRACK

<div>Hybrid working pattern - 2 days per week from London Bridge Office
Hometrack is seeking an experienced Senior Data Engineer to join our product team to help us deliver Hometrack's Data Services ambitions. By building the best property data sets available, which back the market leading AVM, trusted by 17 out of the top 20 mortgage lenders in the UK, we open the door to helping all our customers make the decisions that matter to them - to buy, to lend, to build.
The Data Services team works with 100s of customers across the property sector ranging from mortgage lenders, house builders, investors, fin &amp; proptech, insurers, telco, retail and utilities, as well as others involved in the housing market. Our mission is to inform decision makers by putting the UK&rsquo;s most trusted property data and insights at the heart of the property ecosystem.
Our market intelligence and customer acquisition, retention and engagement solutions are relied upon by leading industry professionals.
Data Services has a diverse product range covering market, property and mover intelligence, delivered through varying mechanisms including data platforms, reports and APIs, providing maximum flexibility when matching our customers&rsquo; needs to the most effective data solution.
Hometrack is looking for an experienced senior data engineer to help us make this a reality.
What we&rsquo;re looking for in a Senior Data Engineer:<ul><li>
Be accountable for team outcomes, playing your part in achieving team goals and ensuring your contribution positively impacts overall success</li><li>
Be a continual improver, looking for ways to help the team do better and be better, again and again</li><li>
Write maintainable, testable code and enjoy providing code reviews</li><li>
Be experienced with Databricks, Delta Lake and Lakehouse architecture for efficient data management; experience with ETL processes and optimizing data pipelines for performance</li><li>
Be strong in Python, SQL, and PySpark</li><li>
Be passionate about building data products for stakeholders and customers, ensuring they are stable, scalable, secure, accurate, observable, and performant</li><li>
Enjoy collaborating closely with colleagues in Product, Analytics, Security, and Software, explaining technical concepts to non-technical audiences</li></ul></div>

Senior Data Engineer

Explore 666+ Product security engineer in London this July. Find roles across top companies and apply now to boost your career.