Remote job
Product Security Engineer
Job details
About this role
Role overview
Help make product security a practical part of software design and delivery by partnering closely with engineering teams. You’ll improve secure defaults and development tools, lead security projects from planning through rollout, and focus on changes that prevent recurring classes of vulnerabilities while supporting engineering progress.
Responsibilities
- Work with engineering to review architecture, assess features, and identify worthwhile security investments. - Build or improve secure defaults, shared libraries, and development patterns that help prevent common vulnerabilities. - Tune static and dynamic testing, dependency analysis, and secret-scanning tools to reduce noise and surface actionable issues. - Lead cross-functional product security projects, influencing roadmaps and explaining risk to technical and non-technical partners. - Use code and automation to expand security coverage and reduce repetitive work. - Evaluate product security practices and provide feedback that improves platform capabilities.
Requirements
- At least 3 years of experience in product security, application security, or secure software development. - Ability to review code and build security tools or automate tasks in a modern programming language such as Python, Go, Ruby, or Java. - Practical knowledge of threat modeling, secure code review, automated security testing, and common application vulnerabilities such as those in the OWASP Top 10. - Experience managing projects and influencing partners across engineering, DevOps, and product teams. - Bachelor’s degree in engineering, computer science, or a related field, or equivalent practical experience. - Ability to handle sensitive technical information responsibly.
Nice to have
Experience with bug bounty or vulnerability disclosure programs, secure-by-default internal libraries, and cloud-native security or infrastructure as code—including Terraform, AWS, GCP, Kubernetes, or Docker—is beneficial.
Benefits and work setup
The role is fully remote and work from home. The source describes a work environment that values inclusion and accommodates qualified candidates with disabilities.