Product Security Engineer

Orbital

. Own the security of Orbital's AI agent, product platform, and development processes .

Posted 11/11/2026full-timeLondon • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in security engineering, particularly for cloud-native products, with a strong focus on vulnerability assessment, incident response, and compliance with ISO 27001 standards. Proficient in threat modeling and communicating security risks across diverse stakeholders.

Highest-signal resume keywords

Cloud-Native Security OwnershipAWS Security KnowledgeIncident Response LeadershipVulnerability Assessment and RemediationThreat Modeling Expertise

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringVulnerability AssessmentIncident ResponseThreat ModelingCode ReviewIAM Policy ConfigurationAutomated Security ChecksPenetration TestingSecurity Risk CommunicationAI-Agent Security

Soft Skills

Independent WorkPrioritizationCommunication

Tools & Technologies

AWSAzureWizKubernetesContainer SecuritySOC 2ISO 27001GuardDutySecurity HubCloudTrail

Industry Keywords

AI Security RisksPrompt InjectionRegulated IndustriesSecurity ConsultancyApplication Security

Tech Stack

Tools & technologies

AWSAzureCloudKubernetes

About the role

Key responsibilities & impact

Own the security of Orbital's AI agent, product platform, and development processes
Build an automated security harness with continuous red-team and blue-team loops
Probe the AI agent, platform, and code to find vulnerabilities and propose or ship fixes
Define vulnerability severity classifications and response times
Automate patching, dependency scanning, and image scanning
Ensure security findings reach owners and are closed
Threat-model the AI agent's handling of untrusted documents, emails, and web content
Design and test defences against prompt injection and data exfiltration
Review designs and changes involving authentication, tenant isolation, secrets, and data handling
Convert recurring security findings into automated checks
Lead technical security incident response, including containment, investigation, and remediation
Build breach playbooks and conduct post-incident reviews with the information security lead
Evaluate and deploy cloud security platforms such as Wiz
Establish detection, alerting, and logging across AWS and Azure
Run red-team exercises, manage external penetration testers, and conduct breach drills
Address penetration-test and security-researcher findings and operate responsible disclosure
Maintain technical evidence for SOC 2 and ISO 27001 controls
Report security findings, remediation status, and residual risk to leadership and engineering

Requirements

What you’ll need

Deep, hands-on security engineering experience
Experience owning security for a cloud-native product or platform
Ability to read code and IAM policies, configure detection, and run security investigations
Strong AWS security knowledge, including IAM, network design, KMS, GuardDuty, Security Hub, and CloudTrail
Experience leading a real security incident, including containment, investigation, communication, and follow-up
Understanding of OWASP-class vulnerabilities
Understanding of AI-agent security risks, including prompt injection and over-broad tool access
Experience using AI agents to find, triage, or fix security issues
Ability to threat-model untrusted documents, emails, web content, tools, and sandboxes
Ability to work independently and set priorities as the first in-house product security engineer
Ability to communicate security risks to engineers, lawyers, and board members
Experience from security engineering, product security, application security, or hands-on security consultancy
Nice to have: experience securing LLM or agentic AI applications or researching prompt injection and AI-specific threats
Nice to have: harness engineering experience
Nice to have: hands-on SOC 2 and ISO 27001 audit experience
Nice to have: Azure, Kubernetes, container security, or sandboxed code execution experience
Nice to have: WorkOS or Okta familiarity
Nice to have: experience in legal, financial, or other regulated industries
Must complete background screening before starting
Must follow Orbital security policies, complete regular awareness training, and handle sensitive data in line with ISO 27001 standards
Must be authorized to work in the UK or obtain required sponsorship/support

Benefits

Comp & perks

Hybrid work arrangement with an expectation of being in the office at least once a week
Background screening before starting
Regular security awareness training
Diverse and inclusive team culture
Opportunity to work on cutting-edge AI technology
Ownership and ability to make a real impact from day one
Opportunity to build and lead the product security programme
Collaboration with product engineers and information security leadership