Senior Software Security Developer - Core Platform Services London

PhysicsX Ltd
London, UK
14 days ago
Apply on www.collegerecruiter.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Working hours
Regular working hours

Tech stack

Artificial Intelligence Cloud Computing Security Code Review Continuous Integration Python (Programming Language) Lightweight Directory Access Protocols (LDAP) OAuth Open Web Application Security Role-Based Access Control Openid Connect Security Assertion Markup Language (SAML) Secure Coding
+3 more
Software Vulnerability Management Software Security Serverless Computing

Job description

We are recruiting for a Senior Software Security Developer within our Core Platform Services Team. You will be responsible primarily for writing secure code components that many teams will use across the business. There is a strong emphasis on authentication for this role.

What you will do

  • Design and implement platform security features and guardrails.
  • Act as an SME for security for the Core Services development team, including mentoring, performing threat modeling, and security code reviews.
  • Help shape incident response procedures and vulnerability management workflows.
  • Support the response team by validating and remediating product security vulnerabilities.
  • Contribute to secure coding standards and provide training/mentorship to developers., We collect diversity and inclusion data solely for the purpose of monitoring the effectiveness of our equal opportunities policies and ensuring compliance with UK employment and equality legislation. This information is confidential, used only in aggregate form, and will not influence the outcome of your application. #J-18808-Ljbffr

Requirements

  • 8+ years in a developer role focused with strong focus on designing and building security features
  • Extensive RBAC/ABAC knowledge and implementation experience
  • Experience with user, agent, and machine authentication workflows.
  • Hands-on experience with secure coding, OWASP Top 10, and threat modeling.
  • Strong developer skills and extensive experience shipping code to production.
  • Experienced in CI/CD, IaC, Python and Go.
  • Track record of balancing pragmatism and security rigor in a fast-paced team.
  • Thorough knowledge of authentication and authorization protocols (OAuth, OpenID Connect, SAML, LDAP, etc.).
  • Strong communication skills, comfortable working across development teams and managing multiple initiatives.

Nice to Have Skills

  • Strong understanding of AI security fundamentals
  • Participation in bug bounty programs
  • Familiarity with the BSIMM framework
  • Experience in cloud security including identity and access management and cloud-native services.

Benefits & conditions

  • Equity options - share meaningfully in the company you’re helping to build.
  • 10% employer pension contribution.
  • Free office lunches.
  • Enhanced parental leave - 3 months full pay paternity and 6 months full pay maternity leave.
  • YellowNest nursery scheme - to help working parents manage childcare costs.
  • 25 days of annual leave (+ public holidays).
  • Private medical insurance - 100% employee cover.
  • Wellhub Subscription - gain access to thousands of gyms, classes and wellness apps.
  • Eye tests.
  • Personal development - dedicated support for learning, development, and leveling up over time.
  • Employee Assistance Programme (EAP) - confidential wellbeing support.
  • Bike2Work scheme and Season ticket loan - to make getting to work easier and greener.
  • Octopus EV salary sacrifice - for a simpler, more sustainable way to drive electric.

About the company

PhysicsX is a deep-tech company with roots in numerical physics and Formula One, dedicated to accelerating hardware innovation at the speed of software.

We are building an AI-driven simulation software stack for engineering and manufacturing across advanced industries. By enabling high-fidelity, multi-physics simulation through AI inference across the entire engineering lifecycle, PhysicsX unlocks new levels of optimization and automation in design, manufacturing, and operations - empowering engineers to push the boundaries of possibility. Our customers include leading innovators in Aerospace & Defense, Materials, Energy, Semiconductors, and Automotive., Work with a high-caliber, collaborative team of engineers, scientists, and operators who care deeply about doing great work, and about helping each other get better. We come from diverse backgrounds, but we share a commitment to operating at the highest level and addressing some of the most complex challenges out there. If you’re ambitious, thoughtful, and driven by impact, you’ll feel at home.

Influence over hierarchy

We operate with a flat structure: good ideas win- wherever they come from. Questioning assumptions and challenging the status quo isn’t just welcomed, it’s expected.

Building meaningful technology is a marathon, not a sprint. We believe in balancing focused, ambitious work with a life beyond it. Our hybrid model blends time together in our Shoreditch office with work-from-home days, giving you the flexibility to work sustainably while staying connected in person.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.collegerecruiter.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · World Congress 2026 Europe

3:39 min

Addressing code review surrender and process exploitation

Laura Tacho Laura Tacho · World Congress 2026 Europe

2:59 min

Applying secure coding practices and proactive system monitoring

Mihaela-Roxana Ghidersa · LIVE

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · World Congress 2022

1:34 min

Analyzing vulnerabilities in standard OAuth 2.0 authorization flows

Alexander Schwartz Alexander Schwartz · World Congress 2026 Europe

1:01 min

Reviewing supplementary platform features and secured enterprise environments

Videos

See all

Related articles

See all