Staff Security Engineer

As Staff Security Engineer at PPRO, you'll act as the technical lead for the Security Engineering team, driving technical and operational excellence while coaching and developing your colleagues. You'll be pivotal in supporting the mission to build robust, secure, and resilient systems.

What you'll do

• Act as technical lead for the Security Engineering team, setting technical direction, coaching and mentoring other security engineers.
• Partner with Engineering teams to integrate security principles, practices, and tools into all stages of the software development lifecycle.
• Design and build reusable Security as Code artefacts and patterns that reduce developer friction while improving security outcomes.
• Conduct threat modeling exercises and security assessments to identify and address risks in critical applications and systems.
• Write Hardening Standards and Security Guidelines for various technologies and processes.
• Develop automations for recurrent and manual tasks around auditing activities, cloud security posture management (CSPM) and other security processes.
• Maintain and expand Infrastructure as Code codebase and CI/CD pipelines.
• Champion the use of AI to streamline security operations, scaling defensive capabilities and enabling non-security teams to adopt security-first practices.

What you'll need

• A natural technical leader: able to guide, coach and mentor engineers, lead cross-team collaborations, and act as a trusted interface between security and the wider engineering organisation.
• Strong expertise in AWS and container security (e.g. Kubernetes).
• Deep understanding of DevSecOps and CI/CD security controls, with hands-on experience in Infrastructure as Code (preferably Terraform), CI/CD pipelines (preferably GitHub Actions) and scripting (Python, bash).
• Solid understanding of software engineering fundamentals, secure software development best practices and security architecture.
• You view AI as an essential force multiplier and actively leverage modern AI/LLM frameworks to accelerate workflows and build scalable security solutions.
• Results-oriented, highly collaborative, pragmatic and proactive, with a continuous improvement mindset.

Nice to have

• GCP expertise in addition to AWS.