Senior Product Security Engineer

Role overview Improve the security of customer facing products by partnering with product and engineering teams throughout development, from early requirements through implementation and release. The role combines architecture and code review, threat analysis, practical security guidance, and coordination of cross-team improvements in a cloud services environment.

Responsibilities - Integrate security considerations into each phase of product development in partnership with engineering teams. - Conduct threat models and architecture reviews, documenting risks and mitigation plans. - Review source code for vulnerabilities and recommend secure implementation approaches. - Help teams develop security focused tests that enforce product requirements. - Identify emerging vulnerability patterns and develop preventive measures; automate security processes where useful. - Break larger cross-team efforts into manageable tasks, coordinate scope, and drive work to completion.

Requirements - Deep understanding of web application architecture and design. - Knowledge of common security weaknesses and remediation practices, including OWASP or SANS guidance. - Experience threat modeling complex, distributed products using established methods. - Familiarity with authentication mechanisms such as SAML and OAuth 2.0. - Understanding of CI/CD processes and tools. - Bachelor’s degree in a related field or equivalent experience; experience in regulated environments such as PCI is relevant.

Nice to have - Experience delivering cloud services with modern software practices; Python, Kotlin, Java, AWS, or Azure experience is preferred. - A related master’s degree or equivalent experience.

Benefits and work setup - Remote first, with occasional office work possible depending on the position; new hires attend in person onboarding. - U.S. base salary range: $195,000–$255,000 in California, Washington, New York, New Jersey, and Connecticut; $173,000–$233,000 in other states. - Compensation may include equity, health, wellness and technology stipends, and benefits including fully subsidized medical, dental, and vision coverage for employees and dependents. Other listed offerings include flexible time off, holidays, and an employee stock purchase plan.