Genomics England
Product Security Engineer (we have office locations in Cambridge, Leeds and London)
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Company Description
Genomics England is a global leader in enabling genomic medicine and research, focused on creating a world where everyone benefits from genomic healthcare. Building on the 100,000 Genomes Project, we support the NHS’s world-first national whole genome sequencing service and run the growing National Genomic Research Library, alongside delivering numerous major genomics initiatives. By connecting research and clinical care at national scale, we enable immediate healthcare benefits and advances for the future.
Our mission is to provide the evidence and digital systems so that by 2035 genomics could play a role in up to half of all healthcare interactions, whilst securing the UK’s position as the best place to discover, prove and benefit from genomic innovation.
We are accelerating our impact and working with patients, doctors, scientists, government and industry to improve genomic testing, and help researchers access the health data and technology they need to make new medical discoveries and create more effective, targeted medicines for everyone.
Behind the Healthcare and Research outcomes, Genomics England delivers through designing, developing and operating complex healthcare software systems.
We're on the cusp of big changes with the real prospect of genomics becoming the fabric of everyday healthcare through the lifetime - from birth to old age.
Job Description
As a Product Security Engineer, you will work as part of the Cyber Security team at Genomics England, partnering closely with engineering squads and product teams to integrate security into day-to-day delivery.
The purpose of this role is to bring security closer to where engineering decisions are made, enabling teams to adopt Genomics England’s security standards in a practical and scalable way. You will work directly with squads as a trusted partner, helping them build and deliver secure systems rather than acting as a central gatekeeper.
You will support teams to shift security left by contributing to secure design and development from the outset. This includes helping teams implement security testing in CI/CD pipelines, improving vulnerability management within squads, and ensuring security issues are addressed as part of normal delivery.
Acting as a bridge between central security and delivery teams, you will translate security policies and risk expectations into clear, actionable engineering practices. You will contribute to threat modelling, design discussions, and security reviews, helping teams break down complex security challenges into pragmatic technical solutions.
This is a hands-on, product-embedded security role. While it is not a platform or site reliability engineering position, it requires strong practical familiarity with cloud-native systems, CI/CD pipelines and infrastructure-as-code to credibly influence design and implementation decisions within squads.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
A key part of the role is enabling and scaling security capability through the Security Champions programme. You will support and grow this community, helping champions build security knowledge and embed good practices within their teams.
Through this role, you will help evolve Genomics England towards a model where security is owned by engineering teams, with Cyber Security providing guidance, expertise, and enablement.
Skills and Experience for Success
- A strong foundation in cyber security engineering, including secure design principles and risk-based decision making.
- Practical experience embedding security into software development, including supporting shift-left practices across design, development, and delivery.
- Experience working hands-on with engineering teams, with the ability to understand application architectures, review code or designs, and help troubleshoot security issues.
- Experience integrating security controls into CI/CD pipelines, including code, dependency, and infrastructure-as-code scanning, with an emphasis on automation and developer experience.
- Practical familiarity with public cloud environments, particularly AWS, including common security patterns and risks.
- Experience working alongside Infrastructure-as-Code and delivery pipelines (e.g. Terraform, GitLab CI/CD or equivalent), with the ability to review and influence implementations.
- Confidence engaging at an engineering level on designs, pipelines and configurations, even where you are not the primary implementer.
- Solid understanding of vulnerability management, including helping teams interpret findings, prioritise remediation, and manage vulnerabilities as part of business-as-usual delivery.
- Experience facilitating threat modelling and contributing to design reviews, helping teams identify and address security risks early in the development lifecycle.
- Ability to translate security standards and policies into clear, actionable engineering guidance, patterns, and reusable approaches.
- Experience working in modern engineering environments (e.g. cloud platforms, APIs, microservices, or containerised systems).
- Strong communication and stakeholder-management skills, with the ability to influence teams through collaboration rather than authority.
- An interest in security education, enablement, and culture, including mentoring engineers and supporting security champions within teams.
This role does not require ownership of production platforms or central security tooling but does require the credibility to work closely with engineers and influence how security is implemented.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Qualifications
Qualifications are not essential for this role; practical experience working with engineering teams and embedding security into delivery is far more important.
However, the following certifications or areas of formal training may be beneficial:
- Certifications or training in secure software development or application security (e.g. secure coding, secure SDLC, or application security practices).
- Knowledge of cloud security principles, whether through formal certification or hands-on experience.
- Training in threat modelling, secure design, or security architecture.
- Exposure to DevSecOps practices, including integrating security into CI/CD pipelines.
- Evidence of ongoing professional development in cyber security or software security, such as learning new tools, techniques, or contributing to security practices within teams.
Equivalent real-world experience enabling teams to adopt secure development practices, integrate security into CI/CD pipelines, and manage vulnerabilities effectively is considered equally valuable.
Additional Information
- Salary From: £78,850
- Closing Date: Sunday 12th July at 23:00 (UK time)
Being an integral part of such a meaningful mission is extremely rewarding in itself, but in order to support our people, we’re continually improving our benefits package. We pride ourselves on investing in our people and supporting them to achieve their career goals, as well as offering a benefits package including:
- Generous Leave: 30 days’ holiday, plus bank holidays, plus additional leave for long service, and also the option to apply for up to 30 days of remote working abroad annually (approval required).
- Family-Friendly: Blended working arrangements, flexible working, enhanced maternity, paternity and shared parental leave benefits.
- Pension & Financial: Defined contribution pension (Genomics England double-matches up to 10%, however you can contribute more if you wish), Life Assurance (3x salary), an Electric Vehicle salary sacrifice scheme and a Give As You Earn scheme.
- Learning & Development: Individual learning budgets, support for training and certifications, and reimbursement for one annual professional subscription (approval required).
- Recognition & Rewards: Employee recognition programme and referral scheme.
- Health & Wellbeing: Subsidised gym membership, a free Headspace account, and access to an Employee Assistance Programme, eye tests, flu jabs.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location