Senior Product Security Engineer

Thomson Reuters

Senior Product Security Engineer developing secure software development lifecycle processes for various products at Thomson Reuters. Collaborating with engineering teams to embed security into every stage of product development.

Posted 6/16/2026full-timeZug • 🇨🇭 SwitzerlandSeniorWebsite

Tech Stack

Tools & technologies

AWSAzureCloudDockerGoogle Cloud PlatformKubernetesSDLC

About the role

Key responsibilities & impact

Promote secure-by-design architectures and implementations across all phases of our S-SDLC for our products and platforms
Review state of the art and industry best practices, translating them into security requirements, practical guidance, and processes
Deliver security at scale through tooling, agentic systems, data pipelines, and automation
Partner directly with specific product groups as their trusted security advisor
Support threat modeling sessions and secure code reviews to identify risks and provide actionable feedback
Secure AI-based systems and products by responding to the evolving threat landscape
Build strong relationships with assigned product groups while collaborating across software engineering, platform engineering, QA, and operations

Requirements

What you’ll need

Bachelor's degree in computer science, or equivalent practical experience
5+ years of hands-on experience in software engineering or application security
Proven analytical skills to develop innovative solutions to complex security challenges
Strong understanding of core security principles (cryptography, authentication, authorization, cloud, network)
Ability to identify, analyze, and mitigate common security vulnerabilities in web applications, APIs, cloud environments, and AI systems
Experience conducting security-focused threat modeling and code reviews across multiple technology stacks and programming languages
Knowledge of software engineering principles with experience designing, implementing and deploying secure systems
Experience using and interpreting the output of software security tools (SAST, SCA, DAST)
Experience with at least one major cloud provider (AWS, Azure or GCP)
Understanding of containerization (Docker) and container platforms (Kubernetes)
Proficiency in writing code, tests, deployment logic, and API integrations

Benefits

Comp & perks

Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role)
Flex My Way: a set of supportive workplace policies designed to help manage personal and professional responsibilities
Career Development and Growth: fostering a culture of continuous learning and skill development
Industry Competitive Benefits: comprehensive benefit plans including flexible vacation, two company-wide Mental Health Days off, retirement savings, tuition reimbursement, and wellness programs
Culture: award-winning reputation for inclusion and belonging, flexibility, and work-life balance
Social Impact: make an impact in your community with paid volunteer days and opportunities for involvement

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

application securitythreat modelingsecure code reviewscryptographyauthenticationauthorizationcloud securitynetwork securitySASTDAST

Soft Skills

analytical skillscollaborationrelationship buildingcommunication