Description
As a Senior Product Security Engineer at Trainline, you will play a critical role in protecting the digital channels that power billions of pounds in annual ticket sales. You will define and own the product security roadmap, aligning priorities with business goals and influencing engineering leadership to embed security into how we design, build and deploy products.
Key responsibilities include:
- Defining and owning the product security roadmap
- Establishing and owning the application security vulnerability management process
- Working with teams across the business to carry out threat modelling for web, mobile and API services
- Assessing the security posture of applications and APIs through code reviews and static and dynamic security testing
- Strengthening the security of iOS and Android apps and the APIs that power them
- Implementing, maintaining and automating security tools to support safe development and operations
- Building secure coding and deployment knowledge across the organisation through training and mentoring
Requirements:
- Significant experience identifying, assessing and mitigating security risks across application design, code and deployed products
- Experience shaping and delivering a product or application security roadmap
- Experience securing mobile applications and APIs
- Hands-on experience with security testing tools such as SAST, DAST and vulnerability scanning solutions
- Practical experience with threat modelling and security reviews
- A strong grasp of secure coding practices and experience embedding security into software development workflows
Benefits include:
- Salary £90K – £100K
- Private healthcare and dental insurance
- Generous work from abroad policy
- 2-for-1 share purchase plans
- EV Scheme to further reduce carbon emissions
- Extra festive time off
- Excellent family-friendly benefits