Senior Software Security Developer – Core Platform Services

Job description

## About us **Re-architecting Engineering for the Age of Intelligence** PhysicsX is the physics AI company for industrials. The company’s mission is to accelerate hardware innovation by overhauling what industrial engineering and manufacturing look like today. PhysicsX is building a new simulation software stack to deliver deep physics AI enablement across the entire engineering lifecycle. The company partners with leading organisations in aerospace & defence, automotive, semiconductors, materials, and energy & renewables, supporting them on some of their most critical and complex challenges. PhysicsX is headquartered in the United Kingdom, with offices in London, New York, and Singapore and an expanding presence in the Bay Area. **The Role** We are recruiting for a Senior Software Security Developer within our Core Platform Services Team. You will be responsible primarily for writing secure code components that many teams will use across the business. There is a strong emphasis on authentication for this role. **What you will do** - Design and implement platform security features and guardrails. - Act as an SME for security for the Core Services development team. This includes mentoring, performing threat modeling, sand ecurity code reviews. - Help shape incident response procedures and vulnerability management workflows - Support the response team by validating and remediating product security vulnerabilities. - Contribute to secure coding standards and provide training/mentorship to developers **What you bring to the table** - 8+ years in a developer role focused with strong focus on designing and building security features - Extensive RBAC/ABAC knowledge and implementation experience - Experience with user, agent, and machine authentication workflows. - Hands-on experience with secure coding, OWASP Top 10, and threat modeling - Strong developer skills and extensive experience shipping code to production. - Experienced in CI/CD, IaC, Python and Go. - Track record of balancing pragmatism and security rigor in a fast-paced team - Thorough knowledge of authentication and authorization protocols (e.g., OAuth, OpenID Connect, SAML, LDAP, etc.). - Strong communication skills, comfortable working across development teams and managing multiple initiatives. **Nice to Have Skills** - Strong understanding of AI security fundamentals - Participation in bug bounty programs - Familiarity with the BSIMM framework - Experience in cloud security including identity and access management and cloud-native services. **What we offer** **Build what actually matters** Help shape an AI-native engineering company at a formative stage, tackling problems that genuinely matter for industry and society. This is work with real-world impact - and something you can be proud to stand behind. **Learn alongside exceptional people** Work with a high-caliber, collaborative team of engineers, scientists, and operators who care deeply about doing great work, and about helping each other get better. We come from diverse backgrounds, but we share a commitment to operating at the highest level and addressing some of the most complex challenges out there. If you’re ambitious, thoughtful, and driven by impact, you’ll feel at home. **Influence over hierarchy** We operate with a flat structure: good ideas win - wherever they come from. Questioning assumptions and challenging the status quo isn’t just welcomed, it’s expected. **Sustainable pace, long-term ambition** Building meaningful technology is a marathon, not a sprint. We believe in balancing focused, ambitious work with a life beyond it. Our hybrid model blends time together in our Shoreditch office with work-from-home days, giving you the flexibility to work sustainably while staying connected in person. **And it doesn’t stop there …** 🚀 **Equity options** - share meaningfully in the company you’re helping to build. 🏦 **10% employer pension contribution** - because investing in future matters. 🍽️ **Free office lunches** - to keep you energised and focused. 👶 **Enhanced parental leave** - 3 months full pay paternity and 6 months full pay maternity leave, to provide extra flexibility during the moments that matter most. 🍼 **YellowNest nursery scheme** - to help working parents manage childcare costs. **☀️ 25 days of Annual Leave (+ Public Holidays)** - because taking time to rest matters. 🏥 **Private medical insurance** - 100% employee cover, giving you complete peace of mind. 💪 **Wellhub Subscription** - gain access to thousands of gyms, classes and wellness apps, supporting both physical and mental wellbeing. 👀 **Eye tests** - because good work depends on good health. 📈 **Personal development** - dedicated support for learning, development, and leveling up over time. 💛 **Employee Assistance Programme (EAP)** - confidential wellbeing support, available whenever you need it. 🚲 **Bike2Work scheme and** 🚆 **Season ticket loan** - to make getting to work easier and greener. 🚗 **Octopus EV salary sacrifice** - for a simpler, more sustainable way to drive electric. *🔎 Watch this space, we’re continuing to build this as we grow…* We value diversity and are committed to equal employment opportunity regardless of sex, race, religion, ethnicity, nationality, disability, age, sexual orientation or gender identity. We strongly encourage individuals from groups traditionally underrepresented in tech to apply. To help make a change, we sponsor bright women from disadvantaged backgrounds through their university degrees in science and mathematics. We collect diversity and inclusion data solely for the purpose of monitoring the effectiveness of our equal opportunities policies and ensuring compliance with employment and equality legislation. This information is confidential, used only in aggregate form, and will not influence the outcome of your application.