Senior Product Security Engineer

About the role

As a Senior Product Security Engineer, you will take ownership of product security across the development lifecycle, working closely with SRE and Platform Engineering teams to embed security best practices. You will act as a bridge between security, engineering, and the wider business to foster a secure-by-design culture while protecting the digital channels that power our ticket sales.

Responsibilities

• Define and own the product security roadmap, aligning priorities with business goals and influencing engineering leadership.
• Establish and own the application security vulnerability management process, including triage, remediation tracking, and reporting metrics.
• Conduct threat modelling for web, mobile, and API services to identify risks and implement countermeasures.
• Assess application and API security posture through code reviews, SAST, DAST, and management of third-party penetration tests.
• Strengthen security for iOS and Android applications, focusing on authentication, authorization, and secure data storage.
• Implement, maintain, and automate security tools to support safe development and operations.
• Build secure coding knowledge across the organization through training, mentoring, and a security champions programme.
• Ensure product security practices align with frameworks such as OWASP, NIST, ISO 27001, GDPR, and PCI DSS.

Required skills

• Application security
• Vulnerability management
• Threat modelling
• SAST
• DAST
• Mobile application security
• API security
• OAuth 2.0
• OpenID Connect
• CI/CD
• Cloud-native
• Containerisation
• Infrastructure as Code

Nice to have

• Security champions programme
• Risk assessments
• Regulatory compliance

Benefits

• Private healthcare
• Dental insurance
• Work from abroad policy
• Share purchase plans
• EV Scheme
• Extra festive time off
• Family-friendly benefits
• Personal learning budget

About the Company

Trainline is Europe's leading independent rail platform, helping millions of travellers find and book the best-value rail and coach journeys. With a team of over 1,000 people from more than 50 nationalities, the company is dedicated to empowering greener travel choices.