About the role
ARE YOU READY TO WORK AT PRIMEREVENUE? PrimeRevenue is the largest private provider of supply chain finance solutions. With billions of dollars processed through our platform with 85 global banks, security is a top strategic priority. The Senior Product Security Analyst is responsible for advancing the security of PrimeRevenue’s products by combining hands-on application security expertise with product security program leadership across the software development lifecycle. This role drives secure coding, vulnerability remediation, secure architecture, and DevSecOps practices to ensure products are designed, developed, and deployed securely, and free from security defects, by design. The Senior Product Security Analyst partners with engineering, platform, and business teams to reduce risk, strengthen security controls, and enable teams to build scalable, resilient, and secure solutions that protect PrimeRevenue’s platform and customer data. WHAT YOU GET TO DO Drive PrimeRevenue initiatives related to DevSecOps and Secure-SDLC to ensure business solutions are highly scalable, resilient, and secure. Support execution of the Product Security roadmap by partnering with engineering and platform TEAMs to reduce risk. Track new and emerging security threats and design solutions to mitigate risk. Provide technical guidance to engineering and development TEAMs on secure architecture and coding practices. Partner with development teams to integrate security tooling and automation into CI/CD pipelines to improve vulnerability detection and remediation. Apply and contribute to secure cloud and application architecture patterns for scalable, resilient systems, demonstrating a firm understanding of AWS, Azure, and similar cloud platforms. Apply and help maintain application and product security standards, policies, and reference architectures aligned with industry best practices and compliance
requirements. Conduct threat modeling, design reviews, and security risk assessments for new and existing product capabilities. Support continuous security monitoring across the application and platform stack, including code, dependencies, infrastructure, and runtime environments. Maintain vulnerability reporting and remediation tracking, including trends, remediation SLAs, and risk posture, providing regular updates to engineering leadership. Perform remediation coding and framework upgrades to drive modernization and enhance the security posture of PrimeRevenue solutions. Continuously evaluate and improve the effectiveness of security controls through testing, validation, and feedback loops (e.g., SAST/DAST results, penetration testing outcomes, bug bounty insights). Partner with Detection & Response and Security Operations to ensure application-layer visibility, logging, and alerting are integrated into broader monitoring and incident response processes. Collaborate with Security, Engineering, Risk, and Compliance teams to strengthen the overall product security posture. Mentor security interns and promote a security-first development culture across the organization. Assist in the development of processes and procedures that measure control efficacy. WHAT ARE WE LOOKING FOR? 3 -7 years of experience in application security, product security, software engineering, or related technical roles. Working knowledge of OWASP Top 10 secure coding guidelines and mastery of at least one common web application programming language (PHP, Java, Node.js, Ruby, Python, C# etc.). Demonstrated experience implementing Secure-SDLC and DevSecOps practices within modern software development environments. Experience designing and securing cloud-native architectures within AWS, Azure, or similar platforms. Experience integrating and managing security tools in CI/CD pipelines (SAST, DAST, SCA, container security, etc.). Comprehensive understanding of security methodologies and modern attack patterns. Strong analytical skills, with focus and attention to detail, clear and concise communication, and a strong work ethic. Proficiency in Microsoft Office Tools. Demonstrated ability to guide and mentor engineers on secure coding practices. Self-directed with the ability to work independently to meet deadlines and produce quality work in a time-sensitive, fast-paced environment. Self-starter; ability to work successfully in a team setting with minimal supervision and assist with after-hour escalations. Low customer facing role; but must have strong communication skills, both verbal and writing. Experience mentoring or leading technical teams is strongly preferred. ABOUT PrimeRevenue: PrimeRevenue is a global fintech provider specialising in supply chain finance that helps large businesses optimise their working capital. With 150+ employees across offices worldwide, including London, we work with clients across more than 30 currencies and process over $250 billion in payment transactions annually. We're a diverse, collaborative TEAM working on complex financial problems at scale, where each individual is valued and we believe curiosity drives great work and long-term growth.
