Senior Engineer, Software Security

Nothing exists to make tech feel exciting again.

Founded in London in 2020, we’ve grown from idea to global challenger in just a few years. Backed by GV (Google Ventures), EQT Ventures, and C Ventures, and investors like Tony Fadell (iPod), Casey Neistat, and Kevin Lin (Twitch), we’re now sold in 40+ markets with millions of users worldwide.

Nothing builds phones, audio products and an operating system used by millions of people. Behind all of it sits Technology & Data in London: the backend services, cloud platforms and data infrastructure that make our products work. That stack runs across cloud platforms such as AWS, GCP, Azure, and various other global hyperscalers. You'll be the engineer who defines how we secure the stack. Standards, tooling, strategies, tactics, architecture: you set them, and the hard part is doing it without slowing anyone down.

Own security lifecycle and secure architecture for Nothing's backend services and cloud platforms, from first design to live operations across all our CI/CD pipelines

Define our secure development standards and wire SAST, DAST and SBOM tooling into how we ship.

Own vulnerability management end to end: find issues, triage findings, and drive engineering teams to closure.

Design our security testing, from penetration testing to fuzzing, and build tools other engineers can run without you.

Ship network and server-side and data protection: API security, WAF, gateways, runtime defences, encryption in transit and at rest.

Partner with our mobile, OS and desktop teams on client-side security tactics and strategy.

Collaborate with our privacy and legal functions to help us engineer solutions to our global regulatory requirements focusing on emergent technologies such as AI