Jobs and Careers
MO
Senior Product Security Engineer
MoonpigUK RemoteRemotefull_timeVerifiedPosted 31 Mar 2023
About the role
Our Ways of Working:We believe that we do our best work when we are together, but also appreciate that everyone works in different ways. That’s why we operate with three working models which look to define where and how our people work - Remote, Hybrid, Site/Office - based.
Although we believe the majority of our people will choose our hybrid working model (at least 2 days in the office each week), for some of our teams that don't require as much in-person connection and collaboration, we offer fully remote working (with paid travel to the Moonpig office up to 6 times per year). Remote roles are specified directly on our job adverts
Work with usMoonpig Group achieved ‘Unicorn’ status in one of the biggest tech IPOs of 2021, making the FTSE 250 index of leading companies listed on the London Stock Exchange with a market cap of £1.5 billion at the time. We’re now growing the security team to work towards an even more ambitious goal of reaching 25 million customers whilst still ensuring that we’re protecting our customers' special moments.
To help get us there, our Product Security Team's mission is to shift left our SDLC (Software Development Lifecycle) processes for code written at Moonpig to reduce the likelihood of introducing new vulnerabilities in production and minimise the risk of externally identified vulnerabilities on Moonpig Services.
But the magic does not stop there. Our architecture is built for scale and flexibility which will allow us to quickly innovate and launch new propositions -- coupling that with the wealth of data we have on our customers, the sky's the limit in the world of experimenting with cutting edge ideas whilst still ensuring that security is at the forefront of all solutions we build.
Moonpig is a hidden gem in terms of our culture. Check out our tech culture and benefits as well as our 4.2 rating and reviews on Glassdoor for a view on how great it is to work here!
What you’ll be doing:As a Product Security Engineer you will be responsible for ensuring that company & customer data is secure at all times. You will be building & maintaining modern security tools, controls & services. To be successful you will need experience ensuring the security of cloud based (AWS & Azure) & on prem infrastructure. We’re a small team, so the role is a hybrid of engineering and vulnerability and risk management. With a focus on automation and collaboration with our wider Technology team to enhance our capabilities in our software development life cycle.
At Moonpig Group, we’re committed to creating an inclusive and caring culture with brilliant people who feel a real sense of belonging. We welcome and celebrate all diverse b
Although we believe the majority of our people will choose our hybrid working model (at least 2 days in the office each week), for some of our teams that don't require as much in-person connection and collaboration, we offer fully remote working (with paid travel to the Moonpig office up to 6 times per year). Remote roles are specified directly on our job adverts
Work with usMoonpig Group achieved ‘Unicorn’ status in one of the biggest tech IPOs of 2021, making the FTSE 250 index of leading companies listed on the London Stock Exchange with a market cap of £1.5 billion at the time. We’re now growing the security team to work towards an even more ambitious goal of reaching 25 million customers whilst still ensuring that we’re protecting our customers' special moments.
To help get us there, our Product Security Team's mission is to shift left our SDLC (Software Development Lifecycle) processes for code written at Moonpig to reduce the likelihood of introducing new vulnerabilities in production and minimise the risk of externally identified vulnerabilities on Moonpig Services.
But the magic does not stop there. Our architecture is built for scale and flexibility which will allow us to quickly innovate and launch new propositions -- coupling that with the wealth of data we have on our customers, the sky's the limit in the world of experimenting with cutting edge ideas whilst still ensuring that security is at the forefront of all solutions we build.
Moonpig is a hidden gem in terms of our culture. Check out our tech culture and benefits as well as our 4.2 rating and reviews on Glassdoor for a view on how great it is to work here!
What you’ll be doing:As a Product Security Engineer you will be responsible for ensuring that company & customer data is secure at all times. You will be building & maintaining modern security tools, controls & services. To be successful you will need experience ensuring the security of cloud based (AWS & Azure) & on prem infrastructure. We’re a small team, so the role is a hybrid of engineering and vulnerability and risk management. With a focus on automation and collaboration with our wider Technology team to enhance our capabilities in our software development life cycle.
Our expectations of you:
- Provide security expertise and guidance to our product development teams and business leaders throughout all phases of the software development life cycle.
- Drive secure SDLC activities; from requirements gathering, reviewing architectures, supporting automated tooling and performing and/or supporting threat models & penetration testing.
- Vulnerability Management, identifying, triaging and managing vulnerabilities.
- Designing, building, automating and maintaining internal security tools, controls and services.
- Evaluation, selection and implementation of security products and services.
- Technical security review and analysis of proposed solutions to identify and define appropriate security controls and their configuration.
- Collaborate with the wider security team to test our detection capabilities (hack ourselves first).
- Educate and empower those around you on Security topics to increase understanding of vulnerabilities and how to prioritise and remediate.
About you:
- Experience building cloud based security solutions (AWS, Azure).
- Experience pen testing of services and scoping of testing.
- Experience of facilitating threat modelling sessions with engineering teams
- Good networking and associated protocol knowledge.
- Experience of selecting, implementing, and maintaining security products and services.
- Automation scripting using Python, PowerShell, Go or similar.
- A genuine enthusiasm for identifying security problems and building solutions to them.
- Understanding of cryptography, authentication, authorization.
- Experience investigating, triaging and managing security incidents.
At Moonpig Group, we’re committed to creating an inclusive and caring culture with brilliant people who feel a real sense of belonging. We welcome and celebrate all diverse b
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s