[Hiring] Senior Security Engineer @Primer.io

Role Description

You’ll be joining the ProdSec/App Sec team to help build the entire product security surface for a company processing payments at scale:

• Threat modelling
• Security review
• Compliance
• Incident escalation
• Multi-year AppSec roadmap

This is a hands-on delivery role, and a genuinely formative one. You’ll help set the security strategy and architecture; you take real ownership of the work that turns it into reality, reviews, research, automation, and the day-to-day partnership with engineering teams.

Security at Primer sits close to the engineering teams it protects rather than off to one side, so you'll spend real time embedded with the people building Cloud, Infra, and product.

What will you be doing?

• Running security reviews and threat modelling on features and systems across Primer's product, and turning findings into clear, actionable guidance for the teams shipping them
• Independently planning and delivering your own security projects, from initial design through to rollout
• Building tooling and automation that makes future reviews faster and cheaper to run
• Coordinating penetration testing and tracking remediation through to closure
• Supporting the recurring compliance work (SOC2, PCI), including evidence collection and remediation tracking against fixed audit windows
• Contributing to AppSec roadmap initiatives across areas like application threats, AI security, supply chain security, and ASPM
• Picking up proactive security work, threat research and hands-on investigation
• Working alongside Cloud, Infra, and GRC on the security aspects of their projects

Qualifications

• Working experience in product or application security: you've done security reviews or threat modelling and can spot the risks that matter
• The ability to read and write code, not just review it
• Sound judgement about risk
• The ability to plan and deliver your own work independently
• Clear communication with engineers who aren't security specialists

Requirements

• Exposure to compliance frameworks like SOC2 or PCI, or genuine appetite to learn them
• Background in payments, fintech, or another regulated, high-stakes domain
• Interest in areas like supply chain security, detection engineering, or AI security

Benefits

• Fully remote and globally distributed
• Competitive share options
• Uncapped holiday, with 25 days minimum to be taken
• Co-working space access across major cities
• Workations & Company Retreat
• The best equipment for your role
• £500 towards your home office setup
• Generous learning budget
• Private Medical Insurance
• A broad set of additional perks and benefits (depending on location)