Security Engineer

As part of our world-class engineering team at Recro, we are expanding our Product Security Engineering function. Our dev teams work across a variety of cutting-edge tech stacks in a fast-moving environment, which makes security both a challenge and an opportunity to innovate. We prioritise guardrails over roadblocks in our security culture, empowering developers to move fast while ensuring that security is built-in, scalable, and resilient.

The Product Security team is responsible for integrating security into all phases of the SDLC from design through deployment including infrastructure and application security, secure development practices, threat modelling, and DevSecOps automation.

Our mission includes:

Driving secure-by-design principles across web, mobile, cloud, and IoT systems.

• Building and maintaining security automation tools for CI/CD pipelines.
• Enhancing our cloud infrastructure security posture at scale.
• Developing secure coding patterns, libraries, and guardrails for developers.
• Partnering with dev teams to identify and remediate security risks early (shift-left mindset).
• Conducting architectural reviews and risk assessments for new features or products.
• Assist engineering teams in performing threat modelling and working with them for effective mitigation techniques.

What we're looking for:

We value diverse security backgrounds and want to work with professionals who are passionate about engineering secure systems at scale.

Required Skills:

Strong understanding of information security fundamentals and the ability to communicate them clearly to engineering and product teams.

• 3-5 years of hands-on experience with secure coding, DevSecOps, and security automation.
• Familiarity with application architecture, threat modelling, CI/CD pipelines, infrastructure-as-code (IAC), serverless, IAM, and cloud-native security.
• Experience integrating security controls into developer workflows.
• Penetration testing is optional and good to have. However, the ability to interpret results is a must.
• Comfortable collaborating across teams and challenging assumptions constructively.
• Solution-oriented, pragmatic, and focused on scalable risk mitigation.
• Proficiency in at least one programming language (Python, Bash, Java, etc.) for tool development and automation.