{"id":1113991,"url":"https://alion.io/job/cfc-principal-product-security-engineer","title":"Principal Product Security Engineer","company":{"id":703351,"name":"CFC","domain":"cfc.com","url":"https://alion.io/company/cfc-4","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":100000,"max_usd":178000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":25},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"LLM Guardrails","optional":false}],"status":"live","first_seen_at":"2026-09-21T13:58:09Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-24T08:21:33Z","board_verified":true,"closed_at":null,"days_open":32,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":32},"description":"At CFC, technology is at the heart of everything we do. We are looking for a Principal Product Security Engineer to lead the strategy and hands-on delivery of security across cloud platforms, code and CI/CD pipelines.\n\nThis is a lead individual contributor role for an engineer who solves unique, high-impact problems, advises across disciplines and helps shape functional strategy. You will lead the build and operation of the product-security toolchain, create secure-by-default patterns and influence how security is embedded across engineering.\nYou will also help CFC adopt AI-assisted and agentic product engineering safely. As these practices develop, you will use proportionate guardrails, controlled experimentation and evidence-led assurance rather than assume settled industry practice.\nAbout the role\nDesign, implement and operate the product-security toolchain across source control, CI/CD, cloud and runtime environments \nIntegrate and tune code, dependency, secrets, infrastructure-as-code, container and cloud security testing \n Build policy-as-code, pipeline controls and automation that prevent material weaknesses reaching production \nSecure the software supply chain through trusted dependencies, SBOMs, artefact signing, provenance and workload identity \nLead threat modelling and security design reviews for complex products and platforms \nDiagnose vulnerabilities and misconfigurations, reduce false positives and work directly with engineers on prevention, remediation and recoverability\nCreate reusable secure cloud, application and pipeline patterns that engineering teams can adopt by default \nDefine and test guardrails for AI-assisted coding and agentic workflows, including identity, delegated authority, data, tools and auditability \nMeasure security coverage, control effectiveness, developer experience and remediation velocity\nAct as a senior technical authority, advising stakeholders and coaching engineers setting the standard for security and data protection excellence across the wider technology organisation\nAbout you\nWe are interested in engineers who combine principal-level judgement with sustained hands-on delivery. You'll likely bring:\nDeep experience in product, application, cloud and DevOps security \nProven experience implementing security tooling in production engineering environments \nStrong knowledge of CI/CD, cloud-native architecture, Infrastructure as Code and software supply-chain security \nPractical experience with application testing, dependency analysis, secrets detection, container and cloud posture tooling \nAbility to write maintainable code, scripts, integrations and policy-as-code \nExperience leading threat modelling and resolving complex security design trade-offs \nAbility to assess emerging AI and agentic engineering practices pragmatically and establish proportionate controls \nAbility to influence senior technical and non-technical stakeholders through evidence and technical credibility \n\nCore Values\nLove what you do:\nWe show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.\nChallenge everything:\nWe’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.\nHave fun, be good:\nInsurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.","description_format":"text","description_chars":3527,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","InsurTech"],"lifecycle":[{"event":"open","at":"2026-09-22T13:58:09Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-24T06:24:00+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":1,"p_active":0.587,"p_room":0.35,"age_days":32,"expected_fill_days":12,"reasons":["conf:1","velocity","win:tail"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/cfc-principal-product-security-engineer","json_url":"https://alion.io/job/cfc-principal-product-security-engineer.json","meta":{"generated_at":"2026-10-24T09:53:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14354,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":703351},"rest":"https://alion.io/mcp/rest/get_company?id=703351"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcfc-principal-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcfc-principal-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcfc-principal-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cfc-principal-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcfc-principal-product-security-engineer"}]}