Senior Product Security Engineer
Dojo, a UK payments acquirer, is hiring a Senior Product Security Engineer in London to strengthen security across its payments products. Day to day they partner with engineers on secure-by-design practices, threat modelling and architecture reviews across GCP, AWS and Kubernetes, and turn findings into actionable remediation guidance.
- Compensation
- Not disclosed
- Location
- London
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Proven experience in Cyber Security, Application Security, or Secure Software Development
- Strong understanding of the Secure Development Lifecycle (SDLC), DevSecOps best practices, and CI/CD security tooling
- Demonstrated experience conducting threat modelling, security architecture reviews, and risk assessments
- Familiarity with cloud security (GCP/AWS), Kubernetes environments, and penetration testing or vulnerability management
- A pragmatic, collaborative mindset with the ability to partner effectively with engineering teams and adapt to a fast-growing scaleup environment
Full description
We’re reinventing payments. In less than four years, Dojo disrupted the market to become the largest and most loved acquirer in the UK. Our payments infrastructure, purpose-built for in-person commerce, is game changing.
Now, over 150,000 customers across four countries choose to transact billions with us every year. But we’re just getting started.
Our people are the driving force behind our success. They are our greatest investment and our ultimate competitive advantage. We hire exceptional people and give them the autonomy, trust, and ownership to thrive. The results take care of themselves.
The role
As a Product Security Engineer, you will play a pivotal role in strengthening the security posture of our critical assets and shaping the design, development, and operation of our products. Working in a fast-paced, collaborative environment, you’ll partner closely with engineering teams to champion secure-by-design principles, balance risk with business goals, and help build next-generation solutions as we transform the payments landscape.
What you will do...
- Collaborate closely with software engineers to integrate and enhance security practices throughout the product lifecycle.
- Establish defence-in-depth security requirements that align seamlessly with our technology strategy and business objectives.
- Conduct architecture reviews and threat modelling across cloud (GCP and AWS) and containerised environments.
- Risk-assess and prioritise findings from reviews, penetration testing, and AppSec/CSPM tooling, delivering actionable remediation guidance.
What you will bring...
- Proven experience in Cyber Security, Application Security, or Secure Software Development.
- Strong understanding of the Secure Development Lifecycle (SDLC), DevSecOps best practices, and CI/CD security tooling.
- Demonstrated experience conducting threat modelling, security architecture reviews, and risk assessments.
- Familiarity with cloud security (GCP/AWS), Kubernetes environments, and penetration testing or vulnerability management.
- A pragmatic, collaborative mindset with the ability to partner effectively with engineering teams and adapt to a fast-growing scaleup environment.
Dojo home and away
We believe our best work happens when we collaborate in-person. These “together days” foster communication, drive innovation and spark our brightest ideas.
That's why we have an office-first culture. This means working from the office 4+ days per week.
With offices across Europe, we know a thing or two about staying dynamic. Need deep focus? Head to a quiet zone. Big ideas? Collaboration spaces have you covered. Just here for a catch-up? Our social hubs make it easy. Do work that counts, in spaces made for you.