Principal Security Engineer (AppSec)

Overview

As Principal Security Engineer at Teya, you will drive the secure SDLC transformation to accelerate software delivery with strong security. You’ll embed with engineering, product, and compliance teams to translate risk into practical safeguards. Your work shapes how we design, build, and ship software safely across a growing engineering estate. You’ll lead through influence, building patterns and enablement that make security the default path for speed and resilience.

Pay / Benefits

• Hybrid working
• Competitive package
• Equal opportunity employer
• Inclusive, diverse work environment
• Room to grow and develop capabilities
• Supportive recruitment process

Responsibilities

• Map current delivery paths and identify security gaps across key teams
• Baseline application estate to assess coverage, risk, and gaps
• Embed with engineering teams and run threat modelling with them
• Identify high-leverage security controls to reduce risk without hampering delivery
• Design and rollout SSDLC controls, patterns, and checkpoints
• Promote secure defaults in templates, libraries, and paved roads
• Develop pipeline-embedded security checks (SAST, SCA, secrets, DAST) that provide trusted signals
• Establish a champions network and create self-serve enablement materials
• Move from severity labels to exploitable attack paths to reflect real risk
• Foster cross-team collaboration to align security with speed and business goals

Key requirements

• Deep application security expertise (theoretical and practical)
• Experience transforming SDLC to SSDLC with value-driven controls
• Attacker mindset capable of identifying complex attack paths
• Strong fundamentals in security across platforms and tools
• Ability to communicate complex concepts to non-technical audiences
• Genuine team-first mindset and cross-functional collaboration

• Clear communication to non-technical audiences
• Collaborative, cross-functional teamwork
• Influence and persuasion without gatekeeping
• Application security fundamentals and risk assessment
• SSDLC transformation and security control design
• Threat modelling and security enablement

…