Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Senior Engineer, Software Security role.
Rezi rewrites your resume against Nothing Technology's job description. Free.
Tailor your resume to this Senior Engineer, Software Security role.
Rezi rewrites your resume against Nothing Technology's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Engineer, Software Security posting at Nothing Technology — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Engineer, Software Security posting at Nothing Technology — free, in seconds.
About the Role
We are seeking an engineer to define and implement security standards, tooling, and strategies for Nothing's backend services and cloud platforms. The role involves owning the security lifecycle, secure architecture, and vulnerability management, ensuring robust security without hindering development speed.
Responsibilities
- Own security lifecycle and secure architecture for backend services and cloud platforms across all CI/CD pipelines.
- Define secure development standards and integrate SAST, DAST, and SBOM tooling.
- Manage vulnerability management end-to-end, including issue identification, triage, and driving resolution.
- Design security testing methodologies, including penetration testing and fuzzing, and develop supporting tools.
- Implement network, server-side, and data protection measures, including API security, WAF, gateways, runtime defenses, and encryption.
- Partner with mobile, OS, and desktop teams on client-side security tactics and strategy.
- Collaborate with privacy and legal teams to engineer solutions for global regulatory requirements, focusing on emergent technologies like AI.
- Lead threat modeling for authentication, data protection, and input handling, utilizing AI and LLMs to simulate attacks and develop defenses.
Requirements
- 6+ years in application security, including designing security architecture for commercial products and services and managing production posture.
- Deep threat modeling expertise with the ability to define company-wide methodologies.
- Hands-on cloud security experience across AWS, GCP, Azure, and other global hyperscalers, securing backend services at scale.
- Command of the secure SDLC (SAST, DAST, SBOM) with the judgment to prioritize findings.
- Experience applying AI or LLMs to security for threat simulation, defense probing, and countermeasure development.
- Solid cryptography and identity fundamentals (TLS, OAuth 2.0, SSO, token management).
- Proficiency in writing production-quality code in at least two languages such as Python, Go, Java, and C++.
- Ability to own a domain end-to-end, maintain a high standard, and navigate ambiguity with technical and legal stakeholders.
Skills
- Application Security
- Security Architecture
- Cloud Security (AWS, GCP, Azure)
- Secure SDLC
- SAST
- DAST
- SBOM
- Vulnerability Management
- Penetration Testing
- Fuzzing
- API Security
- WAF
- Data Protection
- Encryption
- Threat Modeling
- AI/LLMs in Security
- Cryptography
- Identity Management
- TLS
- OAuth 2.0
- SSO
- Token Management
- Python
- Go
- Java
- C++
Location
- London (Kings Cross)
Work Type
- Full-time
- Onsite
Experience Level
- 6+ years
About the Company
- Nothing aims to make technology exciting again by focusing on design, emotion, and human creativity.
- Founded in London in 2020, Nothing is a global challenger brand sold in 40+ markets with millions of users.
- The company is backed by investors including GV (Google Ventures), EQT Ventures, C Ventures, Tony Fadell, Casey Neistat, and Kevin Lin.
- Technology & Data in London powers Nothing's phones, audio products, and operating system using a stack across AWS, GCP, and Azure.