Product Security Engineer

Salary: £55,000 - 70,000 per year

Requirements:

• A strong software engineering background, with the technical depth to read code, review designs and engage credibly with experienced developers.
• Experience of, or a strong demonstrable specialism in, application security or secure software engineering in a software-led environment.
• Practical experience applying security across the software development lifecycle, including areas such as threat modelling, secure coding, testing, vulnerability management and secure delivery.
• Good understanding of how product and development teams operate, including how security considerations are balanced alongside product delivery.
• The judgement to assess exploitability and business impact pragmatically.
• Strong communication skills, with the ability to turn technical security concerns into clear, actionable decisions that developers respect.
• The ambition to make security your dedicated focus and to grow with the role as we build our product security capability.
• Familiarity with recognised standards, frameworks or certifications such as OWASP, CSSLP, ISO 27001 or similar would be helpful.
• Experience in a product, platform or SaaS business.
• Experience in high-trust, regulated or mission-critical environments would be valuable.

Responsibilities:

• Champion security within our product development teams, providing a clear day-to-day voice for security in design, code and backlog decisions.
• Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls.
• Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start.
• Assign pragmatic risk levels and support sensible prioritisation of remediation alongside feature delivery and other technical work.
• Support vulnerability remediation, including root cause analysis and long-term fixes.
• Track the security of third-party components and dependencies within our products, and lead our response when new vulnerabilities and supply-chain incidents emerge.
• Ensure security features and fixes are properly represented in product roadmap, backlog and design decisions, working with product owners and engineering leadership.
• Work with our external security partners to arrange and act on penetration testing and security assessments of our products.
• Contribute to security standards, metrics and ways of working that improve product security maturity over time.
• Support wider assurance and certification activity, including ISO 27001 or other relevant standards, with evidence of how our software is securely built.

Technologies:

• CI/CD
• Support
• OWASP
• PLC
• Security
• Embedded

More:

We are SRT Marine Systems plc (SRT), a respected, established and ambitious multinational company headquartered in the UK with a global customer base. We lead the next generation of Maritime Domain Awareness technologies, products and systems that enhance security, safety, environmental protection and sustainability across the marine domain. This Product Security Engineer role is primarily based from our Bristol office, with occasional travel to our Cardiff and Bath offices and flexibility for hybrid working. We offer a highly competitive salary and benefits package, 25 days annual leave rising to 28 days with service, and real individual development opportunities. We are an equal opportunity employer and are committed to creating an inclusive environment for all employees.

last updated 34 week of 2026