Senior Product Security Engineer

The Role:

• Build and operate a regulated digital health platform where application security is a patient safety concern.
• Ship quickly, adopt AI and agentic systems across clinical operations and patient-facing products.
• Run a lean security function that scales through engineering leverage rather than headcount.

The Team:

• Work within the Cyber Security function, collaborating with Engineering, Product, Clinical, Legal, and the executive team.
• Security is not a gatekeeping function; it scales through influence, credibility, and being useful early.
• You will be a hands-on individual contributor with genuine influence over how the platform is built.

What You'll Do:

• Run threat modelling sessions and own the Secure by Design process.
• Assess and secure AI systems in production, including LLM-backed features and agentic workflows.
• Perform automated penetration testing and embed security into CI/CD pipelines.

Who We're Looking For:

• Brings substantial hands-on application security experience in a product engineering environment.
• Has demonstrable threat modelling practice and practical offensive skills against modern web and API stacks.
• Experienced in cloud-native architecture and integrating security tooling into CI/CD with a track record of shipping security improvements through other teams.