d0ublespeak

As a Senior Security Engineer (Product Security), you will play a significant role in keeping our product safe and secure by building on and maturing Zepto's product security practices. You will work hands-on and shoulder-to-shoulder with Engineering and Product teams, providing guidance and coaching across the software development life cycle while continuing to raise the bar on our security expectations and capability.

This is a security role at its core, but not a gatekeeping one. We are builders – we expect you to read and write production-level code, build tooling and automation, and contribute paved-road solutions that engineers actually want to use. Reporting to the Security Engineering Lead, you will work closely with them to develop and build Zepto's product security strategy and approach. You will apply a consultative and advisory approach when working with the wider Zepto team, empowering them to work confidently and to use the self-service capabilities you help establish.

We have excellent working relationships with our developers and we need to keep it that way. We are not the team of no. We are the team that helps make things better.

Zepto is moving quickly towards an AI-native way of building and operating. You will be someone who is already experimenting with AI and agentic tooling, or is genuinely keen to, and who is open to developing the skills to secure these systems as we adopt them. Within the Security team, you are the go-to person for:

Secure development practices Vulnerability management Security architecture advice

Working in a scale-up, means you get the opportunity to flex your skills in a variety of ways. We are agile and always willing to roll up our sleeves to get things done. You can, however, expect your day to day to be involved in the following:

Coach engineering teams and collaborate to ensure every step of the software development life cycle follows security best practices Design, build and maintain security tooling, automation and paved-road controls as production-quality software Conduct security assessments and architecture reviews of Zepto's applications and services Embed within project teams to ensure they are effectively considering information security risk and prioritising security controls Establish and document security architecture and practices in collaboration with the Security Engineering Lead, Product and Engineering teams Work with the Security Engineering Lead to support Zepto's adoption of AI and agentic systems, and experiment with AI tooling to improve how the Security team works Help manage application security incidents in collaboration with the rest of the Security team

Bunch of security tools: Some are at https://diffsec.dev others:

https://github.com/diffsec/quokka

https://github.com/ihavespoons/hooksy