Staff product security engineer Work, Jobs in Whittlesford, Cam (with Salaries)

Staff Product Security Engineer
Altium —Cambridge
- Full-time
- AWS
- Bachelor's degree
Quick apply
Staff Product Security Engineer
Entrust —Cambridge
- Full-time
- Hybrid work
- Computer Science
- Master's degree
- Bachelor's degree
10d
Linux Infrastructure Engineer
Imperial War Museums —Duxford
- £44,000 - £54,000 a year
- Communication skills
- Annual leave
- Employee assistance programme
6h
Engineer, Staff
Qualcomm —Cambridge
- Doctoral degree
- Computer Science
- Engineering
Customer Quality (Automotive) - Staff Engineer
Qualcomm —Cambridge
- Doctoral degree
- Computer Science
- Engineering
Staff Software Engineer - Product Validation
Arm —Cambridge
- £97,300 - £131,700 a year
- Hybrid work
Staff FPGA Engineer
Entrust —Cambridge
- Full-time
- Hybrid work
- System design
- No degree
- Mentoring
Infrastructure Engineer
Leidos —Huntingdon
- £47,600 - £61,000 a year
- Full-time
- Organisational skills
- Leadership
- Annual leave
- Work from home
Infrastructure Change Engineer
Leidos —Huntingdon
- £47,600 - £61,000 a year
- Full-time
- Organisational skills
- Leadership
- Annual leave
- Work from home
Senior Technical Staff Engineer - Architect (SoC)
Microchip Technology —Cambridge
- Full-time
- Computer Science
- Engineering
- Master's degree
Server CPU Clock Physical Design Engineer, Staff level - Cambridge, UK
Qualcomm —Cambridge
- Doctoral degree
- Engineering
- Master's degree
- Employee stock purchase plan
- Employee assistance programme
Production Electronics Engineer
Blighter Surveillance Systems Limited —Saffron Walden
- Full-time
- Hybrid work
- Continuous improvement
- Communication skills
Quick apply
Staff Formal Verification Engineer (GPU)
Advanced Micro Devices, Inc —Cambridge
- Doctoral degree
- Computer Science
- Engineering
AIOps Lead
M-KOPA —Cambridge
- Full-time
- Remote
- AI
- Leadership
5d
Server CPU Physical Design Integration Engineer, Staff level - Cambridge, UK
Qualcomm —Cambridge
- Doctoral degree
- Engineering
- Master's degree
- Employee stock purchase plan
- Employee assistance programme
CPU RTL Design Engineer (Senior/Staff) - Cambridge, UK
Qualcomm —Cambridge
- Doctoral degree
- Engineering
- Master's degree
- Employee stock purchase plan
2d
Server CPU Physical Design Engineer, Senior/Staff level - Cambridge, UK
Qualcomm —Cambridge
- Doctoral degree
- Engineering
- Master's degree
- Employee stock purchase plan
- Employee assistance programme
Manufacturing Engineer
MBDA —Stevenage
- £43,500 a year
- Overtime
- Hybrid work
- Bachelor's degree
- Manufacturing
- Free parking
Staff Software Engineer (ML QA)
Graphcore —Cambridge
- Management
- Doctoral degree
- Computer Science
- Annual leave
- Employee assistance programme
Tech Specialist - Aircraft Power Electronics
Ultra Electronics —Cambridge
- Full-time
- Engineering
- Master's degree
- Mentoring

I want to receive the latest job alerts for staff product security engineer in whittlesford, cam

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Staff Product Security Engineer

Altium -
Cambridge

Quick apply

Job details

Full-time

Qualifications

CI/CD
Penetration testing
Authentication
SSO
Vulnerability research
Stakeholder collaboration
AWS
Bachelor's degree
CI/CD pipelines
Multidisciplinary collaboration
Test cases
Identity & access management

Full job description

Job Description

Why A365 Software Engineering?

Build the cloud platform that’s transforming electronics design. Altium 365 for cloud lets design engineers communicate, collaborate and bring their ideas to market more efficiently than any platform in the industry.

We are looking for a Senior Product Security Engineer to extend our Product Security capability with a strong focus on continuous vulnerability discovery and prevention.

This role is responsible for:

Building and executing security regression testing
Driving threat modeling across existing and new functionality
Conducting targeted offensive security activities (Red Team–style testing)
Identifying real vulnerabilities based on a deep understanding of our platform and the OWASP Top 10 Web Application Security Risks

The goal is simple: ensure that both existing functionality and new changes remain secure over time, and that real vulnerabilities are discovered before customers do.

Key Responsibilities

Security Regression Testing
- Design and maintain security regression test suites covering critical application flows
- Ensure vulnerabilities, once fixed, are permanently prevented from recurring
- Integrate security regression into CI/CD pipelines
- Define coverage targets for security-critical areas (auth, access control, APIs, data flows)
Threat Modeling
- Lead structured threat modeling sessions for:
  - Existing system components
  - New features and architectural changes
- Identify attack surfaces, abuse cases, and trust boundaries
- Translate threats into:
  - Test cases
  - Security requirements
  - Mitigation plans
- Ensure threat modeling becomes a continuous lifecycle activity
Offensive Security / Red Team Activities
- Perform manual and automated security testing simulating real attacker behavior
- Focus on high-impact vulnerabilities, not theoretical findings
- Validate exploitability and business impact
- Partner with engineering teams to:
  - Reproduce issues
  - Prioritize fixes
  - Validate remediation
OWASP Top 10–Driven Vulnerability Discovery
- Continuously assess the platform against OWASP Top 10 categories
- Use deep product knowledge to find non-obvious, context-specific vulnerabilities
- Go beyond tooling (DAST/SAST) to uncover logic flaws and abuse paths
Security Assurance for Product Changes
- Review new features and changes for security risks
- Ensure all changes are:
  - Threat-modeled
  - Covered by regression tests
- Act as a security gatekeeper without becoming a bottleneck:
  - Enable teams with guidance and tooling
  - Avoid heavy process overhead
Collaboration & Enablement
- Work closely with:
  - Engineering teams
  - Architecture
  - SRE / Platform teams
- Contribute to secure-by-design practices
- Support developers in understanding and fixing vulnerabilities
- Help scale security through:
  - Reusable patterns
  - Automation
  - Security guidance

Qualifications

Required Qualifications

5+ years in Application / Product Security
Bachelor's Degree or equivalent of 12 years of work experience
Strong hands-on experience in:
- Web application security testing
- API security
- Threat modeling methodologies
Deep understanding of OWASP Top 10
Experience with:
- Manual penetration testing
- Security regression testing
- CI/CD security integration
Ability to identify business logic vulnerabilities
Strong understanding of:
- Authentication, authorization, and session management
- Multi-tenant architectures
- Cloud-native systems

Preferred Qualifications

Experience in SaaS / multi-tenant platforms
Familiarity with:
- Bug bounty programs
- Red teaming
- Security automation frameworks
Knowledge of:
- AWS
- Identity systems and federation (SSO, MFA)
Background in software engineering (ability to read/write code)

Additional Information

Altium Limited, a part of the Renesas Group and headquartered in San Diego, California, is a global software company accelerating the pace of electronics innovation. We are redefining electronic product creation in a software-defined world with our industry-first cloud-based platform that unites every stakeholder and phase of electronics development.

From startups to world’s technology giants, our digital platforms give more power to PCB designers, supply chain, and manufacturing, letting them collaborate as never before. At Altium, our teams are empowered to innovate, collaborate globally, and help create the future of electronics development.

We believe in rewarding our employees with a competitive benefits package alongside their salary. More information will be provided during the hiring process.

Quick apply

Refine Your Search

staff product security engineer jobs in whittlesford, cam