Job Search

We are seeking a Content Security Specialist to support content protection across the EMEA region. In this role, you will help safeguard sensitive content and intellectual property throughout its lifecycle, from development and production through distribution and archiving. You will work with internal teams, external partners and service providers to identify security risks, strengthen controls and promote consistent content protection practices across multiple markets.

Your responsibilities will include conducting security reviews and risk assessments, monitoring compliance with content protection standards, and supporting the implementation of policies, procedures and technical safeguards. You will investigate incidents, coordinate response activities and track remediation actions through to completion. The role will also involve reviewing access controls, secure workflows, data handling arrangements and third-party processes; maintaining accurate documentation and reporting; and contributing to audits, training sessions and awareness initiatives. You may also support security assessments for new projects, productions, platforms and distribution channels, ensuring that practical requirements are understood and applied by relevant stakeholders.

The successful candidate will have experience in content security, information security, risk management, compliance or a related field, ideally within media, entertainment, technology or another complex international environment. You should be comfortable interpreting security requirements, assessing risk and communicating recommendations to both technical and non-technical audiences. Strong organisational skills, sound judgement and the ability to manage multiple priorities across different countries are essential. Familiarity with security frameworks, third-party risk, incident management, identity and access management, cloud environments or digital media workflows would be advantageous. Fluency in English is required, with additional EMEA languages welcomed. Occasional travel and flexible collaboration across time zones may be required.

We are seeking a Senior Product Security Engineer to help embed security throughout the product development lifecycle. In this role, you will partner with software engineers, product managers, architects, and infrastructure teams to identify risks, define practical security controls, and deliver secure, resilient products. You will contribute to security strategy while remaining hands-on in assessing applications, services, APIs, cloud environments, and supporting technologies.

Your responsibilities will include leading threat modelling and secure design reviews, conducting vulnerability assessments, and advising engineering teams on remediation. You will develop and maintain security guidance, patterns, and standards; improve application security testing across the development pipeline; and support the integration of tools such as static analysis, dynamic testing, software composition analysis, and secrets detection. You will also investigate complex security issues, help prioritise findings according to business impact, and contribute to incident response, security architecture reviews, and continuous improvement initiatives. Clear documentation and effective communication will be essential, as you will translate technical risks into actionable recommendations for both technical and non-technical stakeholders.

To succeed, you should have substantial experience in product or application security, with strong knowledge of secure software development practices, common web and API vulnerabilities, identity and access management, cryptography fundamentals, and cloud security principles. Experience with modern programming languages, CI/CD systems, infrastructure as code, containers, and security automation is highly desirable. Familiarity with recognised security frameworks and standards, such as OWASP guidance, NIST practices, or equivalent, would be advantageous. You should be comfortable influencing teams, mentoring colleagues, balancing security with usability and delivery goals, and working independently in a changing environment. Relevant professional certifications or demonstrable contributions to security engineering, research, or open-source projects are welcome.

We are seeking a Director Analyst, AI Application Security to provide strategic insight, technical leadership and practical guidance on securing artificial intelligence applications and services. This role will assess emerging risks across the AI lifecycle, including model development, data preparation, deployment, integrations and ongoing operations. You will help shape security strategy, influence senior stakeholders and translate complex technical issues into clear recommendations that support informed business decisions.

Key responsibilities include researching trends in AI security, application security, adversarial machine learning, privacy and responsible AI; analysing new threats, vulnerabilities and attack techniques; and producing high-quality reports, frameworks, presentations and advisory content. You will engage with security, engineering, risk, legal and product teams to understand their challenges and provide actionable guidance. The role will also involve developing maturity models, assessment methodologies and best-practice recommendations; contributing to thought leadership and industry events; and representing the organisation in discussions with technology providers, customers and the wider security community.

Applicants should bring substantial experience in application security, cloud security, artificial intelligence security, software engineering or a closely related discipline, together with a strong understanding of secure software development and modern AI architectures. Experience with large language models, generative AI, machine learning pipelines, APIs, identity and access management, data protection and threat modelling is highly desirable. You will need excellent analytical, written and verbal communication skills, confidence presenting to executive and technical audiences, and the ability to work independently while collaborating across diverse teams. A recognised degree or equivalent professional experience is expected; relevant security, cloud or AI certifications are advantageous. We value intellectual curiosity, sound judgement, commercial awareness and a commitment to practical, ethical and measurable security outcomes.

We are seeking an experienced Head of Product Security to lead the strategy, governance and execution of security across the full product lifecycle. You will establish a proactive, risk-based approach that enables secure innovation while protecting customers, data and business operations. Working closely with engineering, product, architecture, infrastructure, legal and compliance teams, you will ensure security is embedded from product design through development, deployment and ongoing operation.

Your responsibilities will include defining and communicating a comprehensive product security strategy; setting standards, policies and secure development practices; and building effective security-by-design processes. You will oversee threat modelling, architecture reviews, vulnerability management, penetration testing, security testing automation and remediation tracking. You will also lead the response to product-related security issues, assess emerging threats, support customer and regulatory requirements, and provide clear risk reporting to senior leadership. A key part of the role will be developing and mentoring a high-performing team while influencing stakeholders across the organisation and strengthening a culture of shared security ownership.

We are looking for a strategic and hands-on security leader with significant experience in product or application security, preferably within a complex technology environment. You will have strong knowledge of secure software development lifecycles, cloud security, application and API security, identity and access management, vulnerability management, and relevant security frameworks and standards. Experience leading cross-functional programmes, managing security teams and communicating technical risk to non-technical audiences is essential. You should be pragmatic, collaborative and commercially aware, with the judgement to prioritise effectively in a changing environment. Relevant professional certifications or equivalent practical experience are desirable.

We are seeking an Application Security Engineer to help build and strengthen secure software across a diverse technology environment. In this role, you will partner with software engineers, architects, product managers, and infrastructure teams to identify security risks early and integrate effective controls throughout the development lifecycle. You will contribute to security reviews, threat modelling, architecture assessments, secure design guidance, and vulnerability management for applications and services.

Your responsibilities will include conducting code and design reviews, developing security requirements, supporting penetration testing and security assessments, and helping teams remediate vulnerabilities through practical, scalable solutions. You will create and maintain application security tooling, automation, and guidance that improve developer productivity while reducing security risk. You will also investigate security issues, assess their impact, track remediation progress, and communicate findings clearly to both technical and non-technical stakeholders. The role may involve contributing to security standards, internal training, metrics, and processes that promote a strong culture of secure engineering.

The ideal candidate has professional experience in application, product, or software security, along with a solid understanding of secure software development principles and common web, API, cloud, and infrastructure vulnerabilities. Experience with programming or scripting languages, code analysis tools, vulnerability scanners, threat modelling methodologies, and security testing techniques is highly desirable. You should be comfortable reviewing complex systems, explaining risk in business terms, and influencing teams without relying on formal authority. Strong problem-solving, communication, and collaboration skills are essential, as is the ability to manage multiple priorities in a fast-paced environment. Experience with modern development practices, continuous integration and delivery pipelines, cloud platforms, and relevant security frameworks will be advantageous.

We are seeking a Security Design Engineer (Application Security) to help embed security throughout the software development lifecycle. In this role, you will work closely with software engineers, architects, product teams and delivery stakeholders to design secure, resilient applications and services. You will translate security principles into practical engineering guidance, identify risks early, and support teams in delivering solutions that meet business and regulatory requirements.

Your responsibilities will include conducting threat modelling, security architecture reviews and design assessments for new and existing applications. You will define security requirements, review technical specifications, assess application and API controls, and recommend appropriate mitigations for identified risks. You will contribute to secure coding standards, patterns and reusable guidance, while supporting vulnerability management, penetration testing and remediation activities. The role will also involve helping to improve application security tooling and processes, including security testing within CI/CD pipelines, software composition analysis, static and dynamic testing, and secrets management. You will communicate findings clearly to both technical and non-technical audiences and help teams understand the business impact of security decisions.

The successful candidate will have practical experience in application security, secure software development or security architecture, with a strong understanding of common vulnerabilities and attack techniques, including those identified by OWASP. You should be comfortable reviewing code and designs, analysing threats, and working with modern development methodologies, cloud platforms, APIs, containers and identity technologies. Experience with DevSecOps practices, security automation and risk management is highly desirable. Strong communication, collaboration and problem-solving skills are essential, along with the ability to influence delivery teams and balance security, usability and delivery objectives. Relevant professional certifications or demonstrable equivalent experience would be advantageous.

We are seeking a Senior Application Security Engineer to help strengthen the security of modern software products and services across their full development lifecycle. In this role, you will work closely with software engineers, architects, product teams and infrastructure specialists to embed secure-by-design principles into applications, platforms and delivery processes. You will help shape security standards, provide pragmatic guidance and support teams in identifying and addressing risks without unnecessarily slowing innovation.

Your responsibilities will include conducting threat modelling, reviewing application and infrastructure designs, and performing or coordinating security assessments, code reviews and penetration testing. You will analyse findings from automated and manual testing, support vulnerability triage and remediation, and advise on appropriate risk treatment. You will contribute to secure development standards, reusable security patterns and developer enablement through training, documentation and hands-on coaching. You will also help improve application security tooling, including software composition analysis, static and dynamic testing, secrets detection and security monitoring within CI/CD pipelines.

To succeed, you will have substantial experience in application or product security, with strong knowledge of secure software development practices, common vulnerabilities and recognised frameworks such as OWASP. You should be comfortable reviewing code in one or more programming languages and working with cloud-native architectures, APIs, containers and modern DevOps practices. Experience with threat modelling methodologies, security automation and incident or vulnerability management is highly desirable. Strong communication skills are essential, as you will need to explain complex security issues clearly to both technical and non-technical audiences and influence positive change across distributed teams. This is a remote role for candidates based in the United Kingdom, with occasional collaboration across working hours and potential travel for team or business events.

We are seeking a Senior Product Security Engineer to help protect products and services throughout their development lifecycle. In this role, you will work closely with software engineering, architecture, infrastructure, and product teams to embed security into design, development, testing, and deployment. You will provide practical guidance on secure architecture, threat modelling, vulnerability management, authentication and authorisation, data protection, and secure software development practices.

Your responsibilities will include leading security reviews for new and existing products, identifying and prioritising risks, and supporting teams in delivering effective remediation. You will develop and maintain security standards, patterns, tooling, and documentation, while helping to improve security controls across cloud environments, APIs, applications, and third-party integrations. You will also contribute to security automation, code and dependency scanning, penetration testing coordination, incident investigations, and the continuous improvement of product security processes. An important part of the role will be mentoring engineers and promoting a practical, risk-based security culture.

You will bring substantial experience in product, application, or software security, together with a strong understanding of secure development methodologies and modern engineering practices. Experience with cloud platforms, containerised workloads, CI/CD pipelines, threat modelling frameworks, and common application security risks is highly desirable. You should be comfortable reviewing code and architecture, communicating technical risks to varied audiences, and influencing decisions without relying on formal authority. Relevant industry certifications or equivalent practical experience are welcome. The successful candidate will be curious, collaborative, and pragmatic, with the ability to balance robust security requirements against usability, delivery timelines, and business priorities.

We are seeking an Application Security Engineer to help strengthen the security of modern software applications throughout their development lifecycle. You will work closely with software engineers, architects, DevOps specialists and product teams to identify security risks early, promote secure engineering practices and support the delivery of resilient, high-quality applications. This role offers the opportunity to influence security strategy while remaining hands-on with technical assessment and remediation.

Your responsibilities will include designing and maintaining application security processes, integrating security controls into CI/CD pipelines, and conducting code reviews, threat modelling, vulnerability assessments and penetration testing. You will investigate findings from automated and manual testing, assess their potential impact, and work with development teams to implement practical fixes. You will also help establish security standards, provide guidance on secure coding principles, contribute to incident investigations, and track remediation activities through to completion. Clear documentation, reporting and communication with both technical and non-technical stakeholders will be an important part of the role.

Applicants should have professional experience in application security, secure software development or a closely related discipline, together with a strong understanding of common web and API vulnerabilities, including those described by the OWASP Top 10. Experience with security testing tools, source code analysis, dependency management, cloud environments and DevSecOps practices is highly desirable. Familiarity with one or more programming languages and knowledge of authentication, authorisation, cryptography and security architecture are expected. Relevant certifications such as OSCP, CSSLP, GWEB or similar are beneficial but not essential. We are looking for a collaborative, analytical professional who can explain complex risks clearly, balance security with delivery needs, and continuously improve security practices across the software development lifecycle.

We are seeking a Senior Application Security Engineer to help strengthen the security of software products and services delivered across a fast-paced, technology-focused environment. Working remotely within the United Kingdom, you will partner with engineering, platform, product and operations teams to embed security throughout the software development lifecycle. You will provide practical guidance, encourage secure-by-design practices and help teams deliver resilient applications without compromising speed or usability.

Your responsibilities will include defining and improving application security standards, threat modelling new and existing services, and conducting secure design reviews, code reviews and targeted security assessments. You will support the effective use of automated and manual testing tools, including static and dynamic analysis, dependency scanning and software composition analysis. You will investigate vulnerabilities, assess risk, agree remediation plans and track issues through to resolution. You will also contribute to security architecture decisions, incident response activities, security metrics and the continuous improvement of policies, processes and developer education. Clear documentation and the ability to communicate technical risks to both technical and non-technical stakeholders will be essential.

You should have substantial experience in application or product security, with a strong understanding of secure software development and common vulnerability classes such as those described by OWASP. Experience with cloud environments, modern web applications, APIs, CI/CD pipelines, infrastructure as code and containerised workloads is highly desirable. Familiarity with programming or scripting languages such as Python, JavaScript, Java, Go or similar will be useful, as will experience integrating security tools into development workflows. Relevant professional certifications are welcome but not essential. We are looking for someone who is collaborative, curious and confident challenging assumptions, with the judgement to prioritise risk and the communication skills to influence teams effectively in a remote working environment.