Product Security Engineer
Glocomms are working alongside a global quantitative investment firm who is expanding its security function and looking for a Product Security Engineer to partner directly with engineering teams building large‑scale trading, cloud, and data systems. This is a highly technical, fast-paced environment where security is embedded into engineering from day one.
What You'll Do
- Work closely with software engineers to embed security into product design, architecture, and development across multiple languages and platforms.
- Build and maintain a secure SDLC, including code reviews, threat modeling, and secure coding standards for globally distributed systems.
- Integrate security tooling into CI/CD pipelines supporting both cloud and on‑prem environments.
- Strengthen security across Linux and Windows platforms used for trading systems, internal applications, and core infrastructure.
- Identify risks early, perform vulnerability assessments, and implement scalable mitigation strategies in a high‑stakes environment.
- Conduct vendor security reviews and support third‑party risk assessments.
- Mentor engineering teams and drive adoption of secure development practices across the organization.
What You Bring
- 7+ years in Product Security or securing complex, large-scale software systems.
- Strong engineering background with hands-on development experience (Python, C++, Rust, Go, Kotlin/Java, or similar).
- Deep understanding of modern software architecture, secure coding, and cloud security in hybrid environments.
- Experience securing both Linux and Windows systems.
- Strong skills in threat modeling, risk assessment, and influencing engineering teams.
- Comfortable operating in a fast-moving, engineering-driven environment.
Location & Work Model
This role is onsite in New York 4-5 days per week, working directly with engineering and product teams.
Compensation
Base salary: $160,000-$220,000, plus performance-based bonus and competitive benefits.
FAQs
Congratulations, we understand that taking the time to apply is a big step. When you apply, your details go directly to the consultant who is sourcing talent. Due to demand, we may not get back to all applicants that have applied. However, we always keep your CV and details on file so when we see similar roles or see skillsets that drive growth in organisations, we will always reach out to discuss opportunities.
Yes. Even if this role isn’t a perfect match, applying allows us to understand your expertise and ambitions, ensuring you're on our radar for the right opportunity when it arises.
We also work in several ways, firstly we advertise our roles available on our site, however, often due to confidentiality we may not post all. We also work with clients who are more focused on skills and understanding what is required to future-proof their business.
That's why we recommend registering your CV so you can be considered for roles that have yet to be created.
Yes, we help with CV and interview preparation. From customised support on how to optimise your CV to interview preparation and compensation negotiations, we advocate for you throughout your next career move.