AI is being run everywhere, by humans and agents. Harmonic Security governs all of it. The AI Governance and Control (AIGC) platform understands user / agent intent and data context in real time, giving security teams visibility and control across every tool and workflow so companies can move faster with AI while minimizing risk.
We operate in one of the fastest-moving spaces in tech: the emerging intersection of AI and cybersecurity. It's a market still being defined, and we're among the first to build natively for it - protecting sensitive data in real time, at the endpoint, with minimal friction for the teams using it. Enterprises get full visibility and control. Their people get to innovate without guardrails slowing them down.
Named to the Rising in Cyber 2026 list, Harmonic is gaining serious recognition and serious traction. We're led by deep cybersecurity expertise and backed by investors who know the space: N47, Ten Eleven Ventures, and In-Q-Tel.
As AI adoption inside the enterprise accelerates, the ability to safely observe, control, and enforce policy in real time isn't a nice-to-have. It's mission-critical infrastructure. That's what we build.
Harmonic exists to help enterprises adopt AI safely and at scale. We hold ourselves to the same standard. Everyone at Harmonic actively uses AI tools to do their best work, from research and writing to building processes and automating workflows. We expect every new hire to bring curiosity about AI and a willingness to use it to work smarter, faster, and more creatively. For some roles, that means tinkering and staying open to new tools. For others, it means building entirely new systems with AI at the core. We'll be clear about what we expect for each role, and we'll give you the tools and support to get there.
The Security & TechOps team builds the systems, tooling, and research that keep Harmonic secure, trusted, and able to move fast. We work across the entire lifecycle of how the company operates-from how we build software, to how we detect threats, to how we prove our security posture to customers, to how employees use the technology that powers their work.
We focus on enabling speed without sacrificing safety. That means creating secure-by-default engineering practices, building automation and detections that reduce manual work, researching emerging AI security risks, running assurance programmes like SOC 2 and ISO 27001, and shaping the internal platforms that help teams work efficiently and securely.
We’re a hands-on, engineering-first group. We avoid box-ticking and heavy process in favour of practical solutions, strong automation, and constant improvement. We collaborate closely across functions, operate with high ownership, and support each other through rapid growth. Our shared goal is to build the trust, systems, and capabilities that let Harmonic innovate confidently and at scale.
Our goal is simple: enable engineering teams to move fast and ship securely. We do this by creating the tools, standards, and systems that make secure development seamless. Whether it’s hardening pipelines, tuning detection tooling, or staying ahead of emerging AI risks, we build the connective tissue that keeps Harmonic’s products secure and trusted.
This team operates at the heart of our engineering culture - hands-on, collaborative, and pragmatic. We bridge the gap between security and development, helping both move faster and with more confidence.
We’re looking for a Staff Security Engineer, Product to shape how Harmonic builds secure products from the start. You’ll lead the creation of tools, standards, and practices that make secure development part of our everyday engineering workflow.
You’ll work closely with Engineering and DevOps to integrate security into design, build, and deployment. From managing code scanning and vulnerability tooling to supporting product pen tests and monitoring AI-related risks, you’ll help teams ship fast and safely while building lasting confidence in our products.
Act as the security partner to engineering - helping teams design, build, and ship securely without slowing down development.
Drive and maintain the tooling that underpins product security - from code scanning and vulnerability detection to CI/CD hardening and reporting.
Keep a close eye on our own AI systems and tools - monitoring emerging threats and ensuring our AI security posture evolves with the field.
Lead threat modelling across the product - running structured STRIDE and LINDDUN assessments on new features and system designs, building repeatable templates, and using AI tooling to make it faster and more scalable. The goal is making threat modelling a normal part of how we build, not a separate event.
Use AI to build and scale the product security function - integrating tools like Claude Code into security workflows, from automated threat modelling to building internal security tooling. A high-performing programme, not necessarily a large one.
Demonstrable software engineering experience in programming, application design and SLDC.
Proven experience as a Product or Application Security Engineer in a modern engineering environment - you understand how products are built and shipped.
Curiosity for emerging threats, especially around AI and ML systems, and a drive to keep our defences one step ahead.
Excellent communicator who can translate between engineering, security, and go-to-market teams - clear, direct, and grounded in technical reality.
Hands-on experience with structured threat modelling, including both security and privacy threat modelling methodologies (e.g. STRIDE, LINDDUN).
Strong Claude Code or equivalent AI coding agent experience. Demonstrated use of agentic AI to build, automate, and accelerate security engineering work. This is a must-have.
Like working closely with engineering teams to embed security into everyday development without slowing them down.
Enjoy building and tuning security tools, pipelines, and dashboards that give developers useful signal - not noise.
Can translate complex security risks into clear, actionable guidance for engineers and product teams.
Want to shape how secure development happens in a high-growth, modern engineering organisation.
Reach for Claude Code as a first instinct when building or automating something, and want to apply that to building a product security function that punches well above its weight
This isn’t just a job; it’s an opportunity to be part of a team that is redefining cybersecurity. We believe today’s talent is tomorrow’s success, and we’re committed to creating an environment where you can do the best work of your life.
Competitive pay and meaningful equity with a direct stake in Harmonic’s success
Comprehensive benefits, pension plan, generous PTO, and flexible hybrid work
A small, passionate team that values transparency, creativity, and learning
Thoughtful leadership that cares deeply about growth, impact, and people
Annual global off-sites (past trips include Lisbon and Nashville)
The chance to directly shape both our product and our culture as we build a category-defining company
We embrace new, unfamiliar situations that require initiative and rapid decision-making. We orient ourselves quickly and deliver results with minimal guidance.
We raise our hands, take on challenges, and assist others whenever possible. We hunger for opportunities to learn and do more.
We support one another to create cohesion and unity. We collaborate openly, share feedback honestly, and help everyone produce their best work.
Compensation Range: £125K - £135K
