> Markdown version of [/jobs/ext/2795976-senior-software-security-developer-core-platform-services-london](https://www.wearedevelopers.com/jobs/ext/2795976-senior-software-security-developer-core-platform-services-london). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Software Security Developer - Core Platform Services London - **Company:** PhysicsX Ltd - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cloud Computing Security, Code Review, Continuous Integration, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, Open Web Application Security, Role-Based Access Control, Openid Connect, Security Assertion Markup Language (SAML), Secure Coding, Software Vulnerability Management, Software Security, Serverless Computing - **Published:** September 8, 2026 - **Apply:** https://www.collegerecruiter.com/job/2840620546-senior-software-security-developer--core-platform-services-london ## About the Role * 8+ years in a developer role focused with strong focus on designing and building security features * Extensive RBAC/ABAC knowledge and implementation experience * Experience with user, agent, and machine authentication workflows. * Hands-on experience with secure coding, OWASP Top 10, and threat modeling. * Strong developer skills and extensive experience shipping code to production. * Experienced in CI/CD, IaC, Python and Go. * Track record of balancing pragmatism and security rigor in a fast-paced team. * Thorough knowledge of authentication and authorization protocols (OAuth, OpenID Connect, SAML, LDAP, etc.). * Strong communication skills, comfortable working across development teams and managing multiple initiatives. Nice to Have Skills * Strong understanding of AI security fundamentals * Participation in bug bounty programs * Familiarity with the BSIMM framework * Experience in cloud security including identity and access management and cloud-native services. ## Description We are recruiting for a Senior Software Security Developer within our Core Platform Services Team. You will be responsible primarily for writing secure code components that many teams will use across the business. There is a strong emphasis on authentication for this role. What you will do * Design and implement platform security features and guardrails. * Act as an SME for security for the Core Services development team, including mentoring, performing threat modeling, and security code reviews. * Help shape incident response procedures and vulnerability management workflows. * Support the response team by validating and remediating product security vulnerabilities. * Contribute to secure coding standards and provide training/mentorship to developers., We collect diversity and inclusion data solely for the purpose of monitoring the effectiveness of our equal opportunities policies and ensuring compliance with UK employment and equality legislation. This information is confidential, used only in aggregate form, and will not influence the outcome of your application. #J-18808-Ljbffr ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [How GitHub secures open source](https://www.wearedevelopers.com/videos/1450-how-github-secures-open-source) ## Related Articles - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)