Principal Security Engineer (AppSec)

We're a regulated payments fintech operating across multiple European markets, scaling into banking-licence territory. Security Engineering is being rebuilt around a joint operating model with our product, platform, and infrastructure teams. We're hiring a Principal Security Engineer to own the application security side of that model: how software gets designed, built, reviewed, and shipped safely across a growing engineering estate, and how security shows up as an accelerator rather than a toll gate.

This is not a review-queue role, and it is not a role about counting findings. We're not looking for someone to triage scanner output, chase "critical" CVE counts, or sign off tickets. We want an engineer who changes how the company builds software: transforming our SDLC into a secure SDLC, placing controls where they deliver the most value for the least friction, and making the secure path the default path.

The thread running through everything here is influence. You will spend as much time with engineers, product managers, designers, operations, and compliance colleagues as you do with code and tooling. The person who succeeds in this role is the person who can walk into any team, explain the risk in language that team actually uses, and leave them better equipped than when they arrived.