Make Your Mark as an Principal Product Security Engineer at Storio group
About the role.
You will be based in our London office, where you will help shape how security is built into our ecommerce platform and engineering organisation. This is a senior individual contributor role operating at the intersection of Product Security and Application Security. You will work directly with engineers, architects, and product teams to solve complex security problems, influence technical decisions, and make secure-by-design engineering the standardnorm. You will have significant autonomy and influence to establish practical security standards, raise security capability across teams, and guide the secure adoption of AI across our engineering ecosystem.
How you embrace curiosity daily.
You build and enable security automation that improves security outcomes while reducing friction for engineering teams.
You lead threat modelling and security architecture reviews for key products and technology initiatives to identify problems early.
You experiment with and adopt AI tools creatively to automate security engineering workflows and boost productivity.
How you make your mark.
You shape the strategic technical direction of Product Security across our entire platform and engineering organisation.
You protect our platform by providing hands-on expertise across APIs, microservices, cloud infrastructure (AWS), authentication, authorisation, and software supply chain security.
You identify and mitigate emerging security risks,including those introduced by AI, and communicate potential impact clearly to senior stakeholders.
You measure what matters by developing meaningful Product Security metrics to continuously drive security posture improvements.
What you bring to the team.
You have strong experience in security architecture and threat modelling, with a proven ability to turn risk into practical engineering solutions.
You possess deep technical knowledge of application and API security, secure development practices, modern software architectures, and cloud-native systems.
You bring experience embedding security controls into engineering workflows, software supply chains (SBOMs), and the broader software development lifecycle.
You are an excellent communicator who builds trust and influences engineers, architects, and senior technical leaders without relying on direct authority.
You have experience with, or a strong interest in, AI security and leveraging AI tools to advance security engineering.
What sets you apart.
You hold relevant industry or cloud security certifications (e.g., CISSP, CSSLP, AWS Security Specialty), though we care far more about your practical impact than the certificates you hold.
Lead product security engineering by setting the security roadmap, embedding secure design across the product lifecycle, and building scalable tools and practices that reduce risk and strengthen customer trust.
Safeguard product and company systems by advancing security practices, reviewing architecture, modeling threats, managing vulnerabilities, and embedding security throughout the software development lifecycle.
Lead application, cloud, and AI security strategy by designing secure-by-default systems, guiding cross-functional security initiatives, and strengthening vulnerability management and incident response.
Build and evolve application security for an enterprise AI platform, embedding secure design and automated controls across products, APIs, data pipelines, and AI systems while enabling engineering teams to ship safely.
Leads cybersecurity engineering for a federal program, setting technical direction and overseeing application and cloud security initiatives, risk mitigation, compliance, and delivery with government stakeholders.
