Join to apply for the Product Security Engineer – Lead role at Smarsh

1 week ago Be among the first 25 applicants

Join to apply for the Product Security Engineer – Lead role at Smarsh

Get AI-powered advice on this job and more exclusive features.

Who are we?

Smarsh empowers its customers to manage risk and unleash intelligence in their digital communications. Our growing community of over 6500 organizations in regulated industries counts on Smarsh every day to help them spot compliance, legal or reputational risks in 80+ communication channels before those risks become regulatory fines or headlines. Relentless innovation has fueled our journey to consistent leadership recognition from analysts like Gartner and Forrester, and our sustained, aggressive growth has landed Smarsh in the annual Inc. 5000 list of fastest-growing American companies since 2008.

Who are we?

Smarsh empowers its customers to manage risk and unleash intelligence in their digital communications. Our growing community of over 6500 organizations in regulated industries counts on Smarsh every day to help them spot compliance, legal or reputational risks in 80+ communication channels before those risks become regulatory fines or headlines. Relentless innovation has fueled our journey to consistent leadership recognition from analysts like Gartner and Forrester, and our sustained, aggressive growth has landed Smarsh in the annual Inc. 5000 list of fastest-growing American companies since 2008.

We're seeking a Product Security Engineer to support secure development across our engineering teams. In this hands-on role, you'll help identify and mitigate product risks by participating in security reviews, improving tooling, and supporting vulnerability remediation. You'll work closely with senior security engineers and cross-functional teams to build security into our software development lifecycle.

This is a great opportunity for a security-minded engineer who wants to grow their technical breadth while making meaningful impact in a cloud-first, DevOps-centric environment. You must be comfortable working as part of a global team in a dynamic, fast-paced environment. Collaboration across time zones and geographies is a key part of our culture and success.

How will you contribute?

• Secure SDLC Integration: Embed security within the software development lifecycle, ensuring security is considered at every phase—from design to deployment.
• Threat Modeling & Security Design Reviews: Conduct structured threat modeling and security assessments for new features, architectures, and services.
• Vulnerability Management & Remediation: Work closely with engineering teams to identify and remediate vulnerabilities from SAST, DAST, SCA, container security, and cloud security scans.
• Code & Architecture Review: Conduct secure code reviews and architectural security assessments to identify risks early in the development process.
• Automation & Tooling: Enhance security automation capabilities by integrating security testing tools into CI/CD pipelines.
• Penetration Testing & Red Teaming: Facilitate internal and external penetration testing activities, helping to triage and remediate findings.
• Security Champion Enablement: Collaborate with engineering teams to build security awareness and develop a network of Security Champions.
• Incident & Response Readiness: Support Smarsh SOC and security incident response, including root cause analysis and post-mortem reviews for your product(s).
• Security Compliance & Governance: Ensure alignment with regulatory requirements (SOC 2, ISO 27001, etc.) and support audit activities.
  
  

• 7+ years of experience in Product Security, Application Security, or a related security engineering role.
• Deep expertise in secure software development, secure coding practices, and OWASP Top 10 / CWE 25.
• Strong technical proficiency in modern programming languages (e.g., Python, Java, JavaScript, Go, or C#).
• Experience with cloud-native security (AWS, Azure, GCP) and securing containerized environments (Docker, Kubernetes).
• Proficiency in security testing tools such as Burp Suite, Endor, Semgrep, etc.
• Strong background in network security, including firewalls, IDS/IPS, VPNs, and secure network design.
• Hands-on experience with CI/CD security automation (GitHub Actions, Jenkins, GitLab CI, etc.).
• Familiarity with infrastructure-as-code security (Terraform, CloudFormation) and cloud security posture management.
• Strong understanding of identity & access management (OAuth, OIDC, SAML, JWT) and API security.
• Knowledge of industry frameworks like NIST, ISO 27001, and SOC 2.
• Experience driving developer enablement and security training initiatives.
• Excellent communication and collaboration skills to engage with engineering, product, and leadership teams.
• Preferred Qualifications
• Security certifications such as OSCP, GIAC (GWEB, GWAPT, GCSA), CISSP, or CSSLP.
• Experience working in SaaS, multi-tenant cloud environments.
• Knowledge of machine learning security (AI/ML model risks, LLM security best practices).
• Familiarity with attack surface management and threat intelligence.
  
  

• We value our people and offer a competitive salary along with company bonus
• Strong maternity and paternity scheme
• A workplace pension scheme
• Take what you need holiday package
• Private medical insurance
• Dental plan
• Group life assurance
• Group income protection
• Employee assistance programme
• A monthly wellness allowance
• Adoption assistance
• Stock options
  
  

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Software Development

Referrals increase your chances of interviewing at Smarsh by 2x

Sign in to set job alerts for “Product Security Engineer” roles.

London, England, United Kingdom 6 days ago

London, England, United Kingdom 5 days ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 5 days ago

London, England, United Kingdom 2 days ago

London, England, United Kingdom 2 months ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 6 days ago

Graduate Software Engineer 2025 - RegTech

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 1 day ago

London, England, United Kingdom 2 hours ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom $140,000.00-$180,000.00 1 month ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 4 days ago

Software Engineer, All Levels - London & Lisbon

Greater London, England, United Kingdom 6 days ago

London, England, United Kingdom 1 year ago

London, England, United Kingdom 1 day ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 2 weeks ago

London, England, United Kingdom 5 months ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 4 days ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 2 years ago

Newsroom Front-End Developer (12 Month FTC/Secondment)

Isleworth, England, United Kingdom 6 days ago

London, England, United Kingdom 3 months ago

London, England, United Kingdom 8 months ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.