Principal Product Security Engineer

Tricentis
London
6 days ago
Create job alert

Our Product Security team is seeking a Principal Product Security Engineer to define and lead a secure development strategy and approach in a fast-paced, agile development environment. You will be responsible for defining and driving security-related initiatives in collaboration with internal stakeholders. You will bring a wealth of technical expertise and industry experience spanning application security, cloud security, DevSecOps and CI/CD. The ideal candidate for this role has extensive industry experience with a strong technical background, is self-driven, with the ability to translate business objectives into technical requirements.


Responsibilities:

  1. Drive security roadmap for SSDLC adoption across product portfolio, designing security practices in alignment with DevSecOps principles.
  2. Establish guidelines and architectural principles based on industry best practices for both cloud-native and on-premise solutions.
  3. Develop and implement comprehensive approach to addressing security risks in AI based technologies, including frameworks, tools and processes.
  4. Partner with Engineering, DevOps and SRE and collaborate on cross functional initiatives.
  5. Propose and drive organization-wide security initiatives aligned with business goals.
  6. Provide technical guidance to associates in security and engineering as necessary.

To be considered for this role, you must have:

  1. 10+ years of progressive experience in information security including technical leadership roles.
  2. Extensive experience with secure software development lifecycle, security testing, vulnerability management.
  3. Experience with cloud technologies (AWS, Azure), security testing and automation (SAST, DAST, SCA), and AI/ML technologies.
  4. Deep understanding of DevSecOps principles and agile development.
  5. Knowledge of secure architecture and design principles, industry standards (NIST SSDF, OWASP) and security best practices.
  6. Ability to formulate strategic concepts, propose security solutions and communicate effectively to both technical staff and non-technical stakeholders.

To be considered for this role, you must have at least two of the following:

  1. Recognized industry certifications (CISSP, CSSLP, CISM, etc.).
  2. Participation in recognized industry working groups focused on information security.
  3. Experience with governance and security certifications (SOC2, ISO27001, FIPS).
  4. Bsc/Msc degrees or equivalent formal education in cybersecurity or related fields.

We offer:

  1. Competitive salary + bonus.
  2. Favorable working atmosphere in a rapidly expanding company.
  3. Hybrid work environment.
  4. Personal and professional development.
  5. Variety of career opportunities and a wide range of tasks.
  6. Exciting office events and welfare activities. Join us for a rewarding work experience!

Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran.

#J-18808-Ljbffr

Related Jobs

View all jobs

Principal Solutions Engineer (EMEA)

Senior Principal Telemetry Architect

Security Architect

Principal Consultant, Offensive Security, Proactive Services (Unit 42) Remote

RSA - New Logo Sales (UK & Ireland)

Principal Consultant - Security Operations - Proactive Services (Unit 42)

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

10 Must-Read Cyber Security Books for UK Professionals: Boost Your Career and Stay Ahead of Threats

With rapid advancements in digital infrastructure, cloud computing, and the Internet of Things (IoT), cyber threats continue to evolve at lightning speed. For organisations across the UK—and globally—robust cyber security is no longer optional: It’s a strategic imperative. From healthcare and finance to government agencies and tech start-ups, every sector needs skilled professionals to safeguard critical data and protect users. If you’re looking to break into or advance within the cyber security industry, staying updated on the latest techniques, threat landscapes, and defence strategies is paramount. One of the best ways to build and sharpen your expertise is by reading authoritative, high-quality books that combine foundational knowledge with cutting-edge insights. In this guide, we’ve compiled a list of ten books that cater to various skill levels, spanning ethical hacking and threat intelligence to secure software development and cryptography. By diving into these resources, you’ll fortify your understanding of cyber security fundamentals, explore hands-on techniques for defending systems, and gain the strategic perspective needed to excel in roles throughout the UK’s thriving cyber security landscape.

Navigating Cybersecurity Career Fairs Like a Pro: Preparing Your Pitch, Questions to Ask, and Follow-Up Strategies to Stand Out

In a world where digital threats are escalating and online infrastructure underpins nearly every aspect of our personal and professional lives, cybersecurity has swiftly become one of the most sought-after career fields. Demand for skilled cybersecurity professionals outstrips supply, both in the UK and globally. From ethical hackers and penetration testers to governance, risk, and compliance (GRC) specialists, the opportunities are extensive—and lucrative. Amidst this surge in demand, cybersecurity career fairs provide an invaluable chance to meet potential employers face-to-face, gain industry insights, and make connections that can accelerate your career trajectory. Unlike applying to countless jobs online, these events bring companies, security leaders, and aspiring candidates together under one roof. When approached with the right strategy, a single conversation at a cybersecurity fair can open the door to your dream job. In this comprehensive guide, we’ll explore how to prepare thoroughly, engage confidently, and follow up effectively after a cybersecurity career fair. By incorporating these insights into your approach, you’ll stand out from the crowd and maximise your chances of securing the perfect role in this fast-growing field.

Common Pitfalls Cyber Security Job Seekers Face and How to Avoid Them

The cyber security industry in the UK and worldwide is experiencing rapid growth. With cyber attacks growing in sophistication and frequency, organisations are investing more resources than ever into defending their digital assets. From penetration testers and threat analysts to security architects and compliance officers, cyber security professionals are in high demand across a variety of sectors—including finance, healthcare, government, and retail. Yet, in spite of this high demand, the process of landing a cyber security role can be more challenging than many candidates anticipate. The stakes are high: prospective employers entrust cyber professionals with their most sensitive data, their compliance posture, and often their core business operations. Therefore, they’re looking for candidates who can demonstrate not just technical know-how, but also excellent communication, adaptability, and an awareness of the broader business context. In this article, we’ll explore the most common pitfalls that cyber security job seekers face, especially in the UK market, and how to avoid them. Whether you’re a recent graduate, a professional transitioning from a different field, or an experienced practitioner aiming for a senior role, these insights will help you stand out and secure the opportunities that fit your skill set and career goals.