Security Engineer

GoCardless; Greater London; Hybrid; GBP 100,000 - GBP 125,000; Full time

Job summary

A leading payment solutions company is seeking a Product Security Engineer to enhance the security of cloud-native applications. This role involves collaborating with development teams, conducting design reviews, and managing vulnerability assessments. The ideal candidate will demonstrate strong leadership in secure coding and architectural design, while also contributing to the overall security culture. Competitive salary and hybrid working options are offered for the right candidate.

Benefits

Dedicated support and medical cover

Work Away Scheme

Equity options

Comprehensive parental leave

Annual holiday leave with volunteer/wellness days

Qualifications

• Experience in securing a cloud-native environment is essential.
• Familiarity with security and privacy standards like ISO27001, SOC1, and GDPR.
• Comfort with automating security assessments and controls.

Responsibilities

• Enable teams to take ownership of security through collaboration.
• Conduct design reviews and vulnerability assessments.
• Oversee and manage the vulnerability management program.

Skills

Experience in cloud-based application and infrastructure security

Technical leadership in DevSecOps

Proficiency in threat modelling and security architecture

Education

Cybersecurity certifications (CISSP, CEH)

Relevant degree in Computer Science or equivalent

Tools

GCP

AWS

Job description

The role

As a Product Security Engineer, you will enable development teams to take ownership of the security and privacy of their product by collaborating to set requirements and standards, performing design reviews and vulnerability assessments, and helping build security controls. You will also work closely with the dedicated Security Operations and Security Engineering teams.

You will be someone who has experience securing a cloud-native environment, and, in particular, in embedding security and privacy standards in engineering functions. You should also be comfortable automating security and privacy engineering and performing various security assessments.

What excites you

• Developing high-quality code for extensive tasks, showcasing proficiency in leading systems and architecture design independently.
• Leading the design and documentation processes for complex tasks, breaking them down into manageable segments for team collaboration while also handling the most challenging portions.
• Contributing significantly to the company-wide systems architecture, impacting the organisation's technological landscape.
• Providing guidance to developers and architects on secure coding methodologies, architectural design, and security best practices, fostering a culture of excellence within the team.
• Overseeing the vulnerability management program, conducting routine assessments, prioritising resolutions, and tracking progress towards securing systems.
• Demonstrating advanced proficiency in security testing, ensuring comprehensive evaluations of system, application, and network security postures.
• Creating and maintaining robust security policies, procedures, and guidelines for effective programme management.

What excites us

• Experience in cloud-based application and infrastructure security - especially, DevSecOps
• Background in threat modelling and security architecture/secure design
• Awareness of or exposure to security and privacy standards, such as ISO27001, SOC1, CyberEssentials, GDPR, or similar
• Nice to have: Cybersecurity certifications, such as CISSP, CEH, Professional Cloud Security Engineer, or similar
• Technical experience in working with cloud computing providers such as GCP or AWS
• Technical leadership qualities - setting direction alongside the managers and supporting the security team in technical development.

Base salary range

€4,133 to €6,200 gross monthly

Base salary ranges are based on role, job level, location, and market data. Please note that whilst we strive to offer competitive compensation, our approach is to pay between the minimum and the mid-point of the pay range until performance can be assessed in role. Offers will take into account level of experience, interview assessment, budgets and parity between you and fellow employees at GoCardless doing similar work.

The Good Stuff!

• Wellbeing: Dedicated support and medical cover to keep you healthy.
• Work Away Scheme: Work from anywhere for up to 90 days in any 12-month period.
• Hybrid Working: Our hybrid model offers flexibility, with in-office days determined by your team.
• Equity: All permanently employed GeeCees get equity to share in our success.
• Parental leave: Tailored leave to support your life's great adventure.
• Time off: Annual holiday leave based on your location, supplemented by 3 volunteer days and 4 wellness days.

Life at GoCardless

We're an organisation defined by ourvalues; We start with why before we begin any project, to ensure it’s aligned with our mission. We make it happen, working with urgency and taking personal accountability for getting things done. We act with integrity, always. We care deeply about what we do and we know it's essential that we be humble whilst we do it. Our Values form part of the GoCardless DNA, and are used to not only help us nurture and develop our culture, but to deliver impactful work that will help us to achieve our vision.

Diversity & Inclusion

We’re building the payment network of the future, and to achieve our goal, we need a diverse team with a range of perspectives and experiences. As of July 2024, here’s where we stand:

• 45% identify as women
• 23% identify as Black, Asian, Mixed, or Other
• 10% identify as LGBTQIA+
• 9% identify as neurodiverse
• 2% identify as disabled

If you want to learn more, you can read about our Employee Resource Groups and objectives here as well as our latest D&I Report

Sustainability at GoCardless

We’re committed to reducing our environmental impact and leaving a sustainable world for future generations. As co-founders of the Tech Zero coalition, we’re working towards a climate-positive future. Check out our sustainability action plan here.

Interested in building your career at GoCardless? Get future opportunities sent straight to your email.

We want to manage expectations from the start, and if your application is successful you can discuss any questions around the pay range and salary with your Talent Partner.

LATVIA - Demographic Questions

The questions below are completely optional and are anonymous. You can proceed with your application without answering them. Your answers CANNOT be linked to you individually, and they have no impact on the hiring decisions we make. However, we’d appreciate you answering them and here’s why:

We continually measure our efforts to ensure we're on track, and that's where you can help. Want to find out more about D&I at GC? Take a look here.

Which gender do you identify as? Select...

Is your gender identity the same as the sex you were assigned at birth? Select...

What race/ethnicity do you identify as? Select...

Which of the following best describes your sexual orientation? Select...

How old are you? Select...

What is your highest level of education? Select...

Select...

Do you consider yourself to be neurodiverse? Select...