You'll be the technical authority on application security at Prolific.
You'll work hands-on with our engineering teams to find and fix vulnerabilities in our codebase.
Perform security testing and build security tooling.
Embed secure development practices into how we ship software.
Report to the Head of Engineering/Platform and work cross-functionally with product engineering, platform, data, and TechOps teams.

Several years in application/product security and a background in software engineering
Strong knowledge of OWASP Top 10 (Web & API) and modern attack paths (e.g. auth flaws, SSRF, injection, business logic abuse, supply chain)
Experience working with complex, large-scale systems and modern architectures
Hands-on security testing experience (especially Burp Suite) across web apps and APIs
Python for security tooling, automation, or custom detection (Django a plus)
Experience implementing and tuning SAST, SCA, DAST, and secret scanning in CI/CD
Practical threat modelling experience, including leading lightweight sessions
Strong collaboration skills, able to clearly explain issues and drive remediation
Builder mindset, you automate wherever possible
Nice to haves: Experience with Django, Vue.js, MongoDB, GCP
Security champions or bug bounty programmes
Supply chain security (SCA, SBOMs, dependency review)
IaC security (e.g. Terraform, policy-as-code)
Hands-on certifications (OSCP, GWAPT, BSCP)
Experience in scaling environments building out security practices.

Senior Security Engineer

Key skills