Senior Engineer, Software Security

Nothing Technology
London
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 6+ yearsSkills: ["Threat modeling","Vulnerability triage","Security architecture","Partnering","Ability to cut through ambiguity"]

Own Nothing’s security lifecycle and secure architecture for backend services and cloud platforms, from design through CI/CD to live operations. Define secure development standards and embed SAST, DAST, and SBOM tooling into shipping. Lead vulnerability management and security testing (penetration testing and fuzzing), and improve network/server and data protection (API security, WAF, gateways, runtime defenses, encryption). Drive threat modeling, including AI/LLM-based attack simulation, and partner with engineering, privacy, and legal teams for global regulatory compliance.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Nothing Technology
Nothing Technology
1 day ago

Senior Engineer, Software Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Own Nothing’s security lifecycle and secure architecture for backend services and cloud platforms, from design through CI/CD to live operations. Define secure development standards and embed SAST, DAST, and SBOM tooling into shipping. Lead vulnerability management and security testing (penetration testing and fuzzing), and improve network/server and data protection (API security, WAF, gateways, runtime defenses, encryption). Drive threat modeling, including AI/LLM-based attack simulation, and partner with engineering, privacy, and legal teams for global regulatory compliance.
Location: London
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Own security lifecycle and secure architecture for Nothing’s backend services and cloud platforms across CI/CD pipelines from first design to live operations.
  • •Define secure development standards and integrate SAST, DAST, and SBOM tooling into how the team ships.
  • •Own vulnerability management end to end by finding issues, triaging findings, and driving engineering teams to closure.
  • •Design security testing including penetration testing and fuzzing, plus build tools other engineers can run.
  • •Ship network, server-side, and data protection capabilities including API security, WAF, gateways, runtime defenses, and encryption in transit and at rest.

Key Requirements

  • •6+ years in application security, including designing security architecture for commercial products and managing production security posture.
  • •Strong threat modelling expertise, with ability to define methodology for an organization.
  • •Hands-on cloud security across AWS, GCP, and Azure at backend scale.
  • •Deep knowledge of secure SDLC, including SAST, DAST, SBOM, and judging which findings matter.
  • •Experience applying AI or LLMs to security by simulating threats, probing defenses, and building countermeasures.
Experience:6+ yearsApplication securityCloud securityAI
Skills:Threat modelingVulnerability triageSecurity architecturePartneringAbility to cut through ambiguity
Languages:English
Tech Stack:AWSGCPAzureCI/CDSASTDASTSBOMPenetration testingFuzzingAPI securityWAFGatewaysEncryptionTLSOAuth 2.0SSOToken managementPythonGoJava

Company Brief

Nothing Technology
Designs and manufactures consumer electronics and accessories focused on minimalist design and seamless user experience, including smartphones, earbuds, and ecosystem products that integrate hardware and software aesthetics.
Industry: Consumer Electronics
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series C
Headquarters: London, United Kingdom
Founded: 2020
WebsiteLinkedIn