Product Security Engineer, Moonpig
Online company for personalised cards, gifts and flowers
Open for applications
Online company for personalised cards, gifts and flowers
201-500 employees
Open for applications
201-500 employees
Company mission
To help people connect and create moments that matter.
Role
Who you are
- Strong knowledge of application security best practices (such as OWASP)
- Familiarity with cloud infrastructure (such as AWS, Azure, or Google Cloud)
- Strong grasp of infrastructure-as-code and configuration tools (such as Terraform or AWS CloudFormation) for the purpose of deploying security tooling
- Knowledge of extracting metrics and events from security tooling
- Experience working with and securing microservices, and API’s
- Advanced understanding of secure coding principles, the Secure Development Lifecycle, and how to drive acceptance and integration into engineering teams
- Experience implementing and managing SAST and/or DAST within a CI/CD environment
- Understanding of security tools such as WAFs, and vulnerability scanning tools
- Understanding of cryptography, authentication, and authorization
- A positive, collaborative, and pragmatic attitude
- Great communication skills, both verbal and written
- We are also keen to speak to candidates currently in software engineering roles looking to move into Cyber Security. If this is you, please apply!
What the job involves
- We’re currently looking for a Product Security Engineer to join our Security Team
- As a Product Security Engineer you will be responsible for ensuring that company & customer data is secure at all times
- You will be building & maintaining modern security tools, controls & services
- We’re a small team, so the role is a hybrid of engineering work along with vulnerability and risk management, with a focus on automation and collaboration with our wider Technology team to drive secure development processes within our software development life cycle
- Contribute to the development of the product security roadmap and strategy
- Boost, build and innovate upon our security tools in our DevOps pipeline/processes
- Educate and empower those around you on security topics, helping to increase understanding of security issues and how to prioritise and remediate them
- Design preventative and/or detective controls for specific security issues alongside our engineering teams within an agile environment
- Drive security testing (individually, with third parties, and by encouraging adoption within engineering teams) of our products using both structured and explorative approaches, helping to identify vulnerabilities earlier in our product lifecycle
- Provide SME support during incidents and crisis management meetings
Salary benchmarks
Our take
When Moonpig was founded in 2000, it bought into the idea that a personalised gift is always more meaningful, whether sent from the sofa, the commute, or the gym. Customers quickly bought into this vision, and Moonpig saw rapid growth culminating in its 2011 acquisition by Photobox for £120M.
Since then, Moonpig has seen continued success. Through expansion into new products such as flowers (Moonpig is now a top-3 online flower seller) and the development of its own app, Moonpig has established its place within the market for personalised gifts.
And it doesn't plan on slowing down anytime soon, as it looks to expand even further. Recent innovations have included the introduction of giant cards, and the company has also secured the ability to create exclusively branded ranges alongside Disney and Warner Brothers. This commitment to innovation positions Moonpig to capture even more market share and strengthen its leadership in the industry.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
48% female employees
3% employee growth in 12 months
Company
Employee endorsements
Career progression
"I joined Moonpig as an Individual Contributor and have had endless opportunities for progression - not only in the form of promotion but also in the..."
Company benefits
- Annual reviews
- Attractive annual bonus scheme - with increased earning potential based on business and individual performance
- Pension scheme where we match up to 5%
- Referral scheme with cash bonus available
- Interest-free travel loan
- Sharesave Plan - Save as you earn
- Generous staff Moonpig, Red Letter Days and Buyagift products
- Private medical insurance
- Private dental plan
- Life assurance paying 4x your salary
- Eye care vouchers
- Cycle to work scheme
- Free access to 24h mental health and wellbeing resource as well as one to one therapy sessions via Spill
- Dog-friendly offices
- Access to a broad range of training workshops and courses
- Technical and professional qualifications policy, allowing individuals to apply for a more formal professional qualification, using allocated individual allowance
- Career Conversations with your manager to create your Career Development Plan
- 25 days’ holiday plus 1 day per year of service (up to 30 days)
- Growing Your Family - 8 weeks paid supporting caregiver leave and 24 weeks full pay primary caregiver leave (based on qualifying criteria)
- Flexible working opportunities based on our Ways of Working - inclusive of Hybrid and Remote
- Summer Hours - We finish at 4pm on Friday's during the months of June, July and August
- Volunteering - 1 day - the equivalent of 8 hrs of time to give back - through a chosen charity or our MP Group Foundation
- Matched Funding Scheme - This scheme provides colleagues with a fundraising allowance to support causes close to their hearts
Company values
- Be Brave - When we see opportunities, big or small, we grab them. Our strong judgement and the knowledge that others have our back means we feel confident to take risks. Being brave comes in all shapes and sizes; sometimes it’s ‘just’ speaking up or giving a colleague some feedback that you know will help them grow. It’s about challenging, getting involved and making yourself heard
- Raise the Bar - We take ownership, deliver on our promises and continuously strive to raise the bar in everything we do. We don’t just meet our goals, we exceed them - and we’re always thinking five steps ahead to figure out how we can increase our impact even further
- Keep it Simple - We always strive to simplify both what we do and how we do it. That means that we focus on the things that will have the most impact, figure out the simplest way to deliver them and don’t, ever, over-complicate things
- Think Team - We do what’s right to help everyone thrive – not what feeds our ego. We think beyond the boundaries of our immediate team and call on others to make magic happen across teams. We have deep levels of trust with one another and share information generously, but never excessively. We win together because we think of the ‘we’ before the ‘I’
Company HQ
Farringdon, London, UK
Articles
Leadership
Nickyl Raithatha
(CEO)Previously worked in Banking at Goldman Sachs, then went on to lead Rocket Internet's eCommerce portfolio, before founding Finery, a womenswear brand.
Diversity, Equity & Inclusion at Moonpig
Hannah Berman (Senior TA Partner )
- We are very proud of our Employee Resource Groups which include: Women's Inclusion Network, LGBTQ+ Committee, Moonpig Against Racism
- We conduct unconscious bias training across the business and also focus in on the recruitment journey as well for Hiring Managers to support everyone and promote inclusion.
- Our Job Descriptions are put through both a gender decoder and also a readability decoder to be more inclusive for both men and women and also for those who may have difficulty reading complex job descriptions.
- We invest in specific platforms which focus on diverse backgrounds and individuals in terms of sourcing and recruiting talent in to Moonpig.
- We provide mental health support for every employee through a 3rd party provider. This can be accessed directly and confidentially.
- We hire 3 apprentice engineers each year with at least 50% of these being females.
Share this job
View 5 more jobs at Moonpig