Staff Product Security Engineer

doxy.me - telemedicine for all

. Design and build core SecurityOS capabilities, including domain modules, integrations with identity, endpoints, cloud, code, and ticketing systems, event models, reporting, and console layers .

Posted 11/6/2026full-timeLondon • United KingdomLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and securing software systems, with a strong focus on application security, secure SDLC practices, and threat modeling. Proficient in leveraging AI within security platforms and collaborating effectively with product engineering teams.

Highest-signal resume keywords

TypeScript DevelopmentNode.js ExperienceApplication Security ExpertiseThreat Modeling SkillsSecure SDLC Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Software DevelopmentSystem DesignSecurity Code ReviewVulnerability PreventionAI Integration

Soft Skills

Proactive Problem SolvingCollaboration with EngineersAdaptability in Ambiguous Situations

Tools & Technologies

AWSKubernetesInfrastructure as Code

Industry Keywords

HealthcareHIPAA ComplianceTelehealth PlatformsRegulated Industry Experience

Tech Stack

Tools & technologies

AWSCloudKubernetesNode.jsSDLCTypeScript

About the role

Key responsibilities & impact

Design and build core SecurityOS capabilities, including domain modules, integrations with identity, endpoints, cloud, code, and ticketing systems, event models, reporting, and console layers
Build and govern AI agents within the security platform, including permissions, context, action controls, auditing, and human-user access integration
Own product security for doxy.me's telehealth platform as an embedded engineer
Conduct threat modeling with product teams
Perform security-focused design and code reviews
Fix or build software directly when that is the fastest path
Build security tooling and guardrails that make secure practices the default
Automate the security SDLC and security testing at scale
Shape the SecurityOS roadmap and the operation of doxy.me's security function
Build and run internal security platforms and ship product security work for doxy.me's telehealth platform

Requirements

What you’ll need

Staff or principal level expected
Experience building and shipping software from idea to production, maintenance, and adoption, using TypeScript and Node or a comparable stack
Ability to design systems from the data model up and get them into production
Depth in application and product security, including secure SDLC, threat modeling, secure design and code review, OWASP, and vulnerability prevention
Experience building solutions proactively without being asked
Ability to take ambiguous problems from concept to working software without a specification or ticket
Comfort building with and around AI, including designing systems where agents are first-class actors with controlled capabilities
Ability to work as a peer with product engineers
Bachelor's degree in computer science or related field, or equivalent experience
Experience with remote, globally distributed teams
English is the language of all internal communication
Nice to have: platform, internal product, or developer tool built from zero to adoption
Nice to have: startup or founding experience, or a seriously shipped side project
Nice to have: healthcare, HIPAA, or regulated-industry experience
Nice to have: AWS, Kubernetes, and infrastructure as code

Benefits

Comp & perks

Unlimited PTO
Private medical, optical and dental healthcare through AXA
5% matched company pension
Remote working with a flexible office workspace in London Liverpool Street
Company equipment, including latest laptop
£500 spending allowance on equipment you can keep
Competitive salary