{"id":3074033,"url":"https://alion.io/job/arctic-research-development-ltd-product-security-engineer","title":"Product Security Engineer","company":{"id":4411968,"name":"Arctic Research & Development Ltd.","domain":"arcticrd.com","url":"https://alion.io/company/arctic-research-and-development-ltd","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Cirencester, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":135000,"period":"year","method":"role_country_seniority_unknown","sample_n":148},"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"Machine Learning","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-07-28T10:01:17Z","employer_posted_date":"2026-07-28","last_verified_at":"2026-10-24T20:49:16Z","board_verified":true,"closed_at":null,"days_open":88,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":88},"description":"ONSITE 5 DAYS / WEEK\nLOCATION: CALMSDEN, CIRENCESTER, UK\nTHE LAST FRONTIER\nThe Arctic is a place of extremes: unforgiving, untamed, and undergoing rapid change. A literal defrosting reveals a multi-trillion-dollar opportunity spanning energy, defence, logistics, research, and infrastructure.\nArctic Research and Development (ARD) was founded on a paradox. The Arctic is both the next great economic frontier and one of the most hostile environments on Earth. Rich in resources and strategically vital, yet bone-chillingly cold, dark for months, and fundamentally inhospitable to humans. This paradox-an explosion of activity in a place that resists human presence-is why we exist.\nOur solution is autonomy.\nWe build systems that operate reliably and intelligently in the Arctic, so that humans don't always have to.\nFounded by record-holding pioneers with decades of polar experience, we take calculated risks on hard problems that matter. If you want to build and deploy ground-up technology with real-world impact, at an inflection point in history that won’t reappear, we’d like to talk.\nTHE ROLE\nWe’re hiring our first Product Security Engineer. Security Engineering at ARD blends sharp technical skill, an attacker's mindset, and tangible real-world stakes. You'll operate across our entire hardware and software product suite - cloud infrastructure, applications, identity systems, and the autonomous products we field - spotting and cutting down the risks that actually matter. The systems we run and the data we hold call for a security approach that's thorough, flexible, and woven into everything we do. Your work will directly underpin the trust partners, customers, and the public place in us, while keeping our teams free to build and ship with confidence. Given how high the stakes are at ARD, this is core to delivering our mission the right way.\n* Please note: this role is not eligible for visa sponsorship *\nCORE RESPONSIBILITIES\nSpot, evaluate, and rank security risks across our physical products, systems and infrastructure - separating hypothetical worries from genuine threats to the business\n\nBuild and roll out practical security controls across cloud platforms, applications, products, and data, and help engineering teams do likewise\n\nBuild and use threat models to catch architectural weak points, trust boundary gaps, and failure modes before they turn into incidents\n\nOwn secure-by-design evidence, EN 18031/CRA Annex I assessments, fuzzing/pen-test programmes, the vulnerability register and advisories\n\nWork alongside engineering, product, and operations teams as a trusted security partner - offering patterns, guidance, and guardrails rather than acting as a gatekeeper\n\nPlay a part in detecting, investigating, and containing security incidents, and push for lasting fixes based on what we learn\n\nCut down on manual, reactive security work through automation, better tooling, and secure-by-default habits built into how we develop and run systems\n\nApply technical rigour to assurance work like audits, certifications, and customer security reviews - making sure our controls hold up in practice, not just on paper\n\nREQUIREMENTS\nEssential\nDeep, hands-on skill in one or two security domains - application security, cloud security, identity and access management, cryptography, detection and response, or platform security - backed by real evidence of impact\n\nAn instinct for trust boundaries, failure modes, blast radius, and attacker behaviour, rather than viewing vulnerabilities in isolation\n\nA knack for turning complex security risk into terms that land with engineers, product managers, and senior leadership alike, and for shaping outcomes through persuasion rather than title\n\nA risk-based approach - weighing decisions proportionately under uncertainty, and always asking whether the work cuts real risk rather than just checking a compliance box\n\nComfort juggling multiple teams and technical domains at once without losing quality or judgement\n\nA history of finding gaps and pushing security fixes through to completion, even in messy or loosely defined problem spaces\n\nDesirable\nTime spent in or around regulated, high-assurance, or defence-adjacent settings where security demands are intricate and failure carries real weight\n\nPractical offensive security background - red teaming, penetration testing, or adversarial simulation - that shapes how you think about defensive design and threat modelling\n\nAwareness of security issues unique to AI or machine learning systems, such as model integrity, data pipeline security, or adversarial ML\n\nA hand in building security programmes at scale - security champions networks, secure development lifecycle tooling, or company-wide risk frameworks\n\nA background in cloud-native security engineering, especially across AWS, GCP, or Azure, spanning infrastructure-as-code, container security, and cloud identity patterns\n\nSome exposure to supply chain security issues, such as dependency management, build pipeline integrity, or third-party component assurance\n\nExperience working with classified data, government security frameworks, or cross-domain security requirements\n\nFuture Security Clearance Requirements\nAs our business scales into the defence and security sectors, the responsibilities of this role are expected to evolve to include projects requiring UK Security Check (SC) clearance.\nWhile an active clearance is not required to apply or start in this role, candidates must be willing and eligible to undergo UK Government security vetting in the future should project requirements dictate it.\nTo meet the standard eligibility criteria for UK standard SC vetting, you must typically have resided in the UK for the past 5 continuous years, hold a valid passport, and be capable of passing comprehensive background, financial, and criminal record checks.\nWHAT WE OFFER\nCompetitive compensation\n\nPrivate Health Insurance from Day 1\n\nDental & Vision\n\nEquity - meaningful options as an early employee at an early-stage company\n\nReal field exposure - travel to Arctic sites and Outposts when needed\n\nMission-driven culture - focus on impact, not hours logged\n\nARD is an equal opportunities employer. We hire on merit, based on skills, experience and potential, and welcome applications from everyone regardless of age, disability, gender reassignment, marriage or civil partnership, pregnancy or maternity, race, religion or belief, sex or sexual orientation. We know great candidates sometimes hold back unless they tick every box, so if this role excites you but your experience doesn’t match every point, we’d still love to hear from you, especially if you bring a background or perspective that is under-represented in science and engineering. If you need any reasonable adjustments during the application or interview process, just let us know at .","description_format":"text","description_chars":6868,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Health insurance"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-22T10:15:18Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.344,"p_room":0.28,"age_days":87,"expected_fill_days":23,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/arctic-research-development-ltd-product-security-engineer","json_url":"https://alion.io/job/arctic-research-development-ltd-product-security-engineer.json","meta":{"generated_at":"2026-10-24T20:51:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30453,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4411968},"rest":"https://alion.io/mcp/rest/get_company?id=4411968"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farctic-research-development-ltd-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farctic-research-development-ltd-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farctic-research-development-ltd-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/arctic-research-development-ltd-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farctic-research-development-ltd-product-security-engineer"}]}