Product Security Engineer

Role overview Help make product security a routine part of software design and delivery. You will work closely with engineering, product, and DevOps teams to reduce meaningful risk while supporting development speed, and lead security projects from early scoping through implementation.

Responsibilities - Advise engineering teams on architecture and feature design, validate changes, and help prioritize security work. - Build secure defaults, reusable libraries, and internal development paths that prevent recurring vulnerability classes. - Improve static and dynamic testing, dependency analysis, and secret-scanning tools to reduce noise and surface actionable findings. - Plan and deliver cross-functional product security projects, communicating risks and influencing engineering and product roadmaps. - Use code and automation to expand security coverage and reduce repetitive work. - Help improve a vulnerability disclosure or bug bounty program by testing approaches and sharing product feedback.

Requirements - At least three years of experience in product security, application security, or secure software development. - Ability to review code and build security tools or automation in a modern programming language. - Practical knowledge of threat modeling, secure code review, automated security testing, and common application vulnerabilities. - Experience managing projects and influencing engineering, DevOps, and product partners. - A relevant degree or equivalent practical experience.

Nice to have - Experience with bug bounty or vulnerability disclosure programs, or building secure-by-default libraries. - Familiarity with cloud platforms, infrastructure as code, containers, or Kubernetes. - Experience in a fast-moving security or software-as-a-service environment.

Benefits and work setup - Fully remote, work-from-home role.