Product Security Analyst

ARE YOU READY TO WORK AT PRIMEREVENUE?

PrimeRevenue is the largest private provider of supply chain finance solutions. With billions of dollars processed through our platform with 85 global banks, security is a top strategic priority.

 

The Senior Product Security Analyst is responsible for advancing the security of PrimeRevenue’s products by combining hands-on application security expertise with product security program leadership across the software development lifecycle. This role drives secure coding, vulnerability remediation, secure architecture, and DevSecOps practices to ensure products are designed, developed, and deployed securely, and free from security defects, by design.

 

The Senior Product Security Analyst partners with engineering, platform, and business teams to reduce risk, strengthen security controls, and enable teams to build scalable, resilient, and secure solutions that protect PrimeRevenue’s platform and customer data.

WHAT YOU GET TO DO

• Support PrimeRevenue initiatives related to DevSecOps and Secure-SDLC to ensure business solutions are highly scalable, resilient, and secure. 
• Support execution of the Product Security roadmap by partnering with engineering and platform TEAMs to reduce risk. 
• Track new and emerging security threats and help design solutions to mitigate risk. 
• Provide input to engineering and development TEAMs on secure architecture and coding practices, escalating complex decisions to senior team members 
• Partner with development teams to integrate security tooling and automation into CI/CD pipelines to improve vulnerability detection and remediation. 
• Apply and contribute to secure cloud and application architecture patterns for scalable, resilient systems, demonstrating a firm understanding of AWS, Azure, and similar cloud platforms. 
• Apply and help maintain application and product security standards, policies, and reference architectures aligned with industry best practices and compliance requirements. 
• Participate in threat modeling, design reviews, and security risk assessments for new and existing product capabilities. 
• Support continuous security monitoring across the application and platform stack, including code, dependencies, infrastructure, and runtime environments. 
• Maintain vulnerability reporting and remediation tracking, including trends, remediation SLAs, and risk posture, providing regular updates to engineering leadership. 
• Perform remediation coding and framework upgrades toto help enhance the security posture of PrimeRevenue solutions. 
• Continuously evaluate and improve the effectiveness of security controls through testing, validation, and feedback loops (e.g., SAST/DAST results, penetration testing outcomes, bug bounty insights). 
• Partner with Detection & Response and Security Operations to support application-layer visibility, logging, and alerting are integrated into broader monitoring and incident response processes. 
• Collaborate with Security, Engineering, Risk, and Compliance teams to strengthen the overall product security posture. 
• Mentor security interns and promote a security-first development culture across the organization.
• Assist in the development of processes and procedures that measure control efficacy. 

WHAT ARE WE LOOKING FOR?

• 3 years of experience in application security, product security, software engineering, or related technical roles. 
• Working knowledge of OWASP Top 10 secure coding guidelines and working proficiency of at least one common web application programming language (PHP, Java, Node.js, Ruby, Python, C# etc.). 
• Demonstrated experience supporting Secure-SDLC and DevSecOps practices within modern software development environments. 
• Experience with securing cloud-native architectures within AWS, Azure, or similar platforms. 
• Experience using and supporting security tools in CI/CD pipelines (SAST, DAST, SCA, container security, etc.). 
• Working understanding of security methodologies and modern attack patterns. 
• Strong analytical skills, with focus and attention to detail, clear and concise communication, and a strong work ethic. 
• Proficiency in Microsoft Office Tools. 
• ability to guide engineers on secure coding practices. 
• Self-directed with the ability to work independently to meet deadlines and produce quality work in a time-sensitive, fast-paced environment. 
• Self-starter; ability to work successfully in a team setting with minimal supervision and assist with after-hour escalations. 
• Low customer facing role; but must have strong communication skills, both verbal and writing. 

 

ABOUT PrimeRevenue:

 

PrimeRevenue is a global fintech provider specialising in supply chain finance that helps large businesses optimise their working capital. With 150+ employees across offices worldwide, including London, we work with clients across more than 30 currencies and process over $250 billion in payment transactions annually. We're a diverse, collaborative TEAM working on complex financial problems at scale, where each individual is valued and we believe curiosity drives great work and long-term growth.