Remote job
Staff Security Engineer
Job details
About this role
Role overview
Provide senior technical leadership for a product security program covering software and cloud services. You’ll help shape its strategy and roadmap, guide teams toward secure designs, and strengthen security practices across development and deployment. The work involves close partnership with architecture, development, DevOps, and cloud engineering teams, balancing security risks with product and business needs. The role is fully remote and based in the United States.
Responsibilities
- Assess the current product security program and help define its future direction and multi-year roadmap. - Advise on secure product architecture and conduct end-to-end security reviews and threat models. - Document application and design risks, and help teams address them through practical security guidance. - Expand and mature the secure software development lifecycle, including baseline standards for cloud, container, application, and infrastructure security. - Integrate security practices into CI/CD pipelines and automate recurring security operations. - Respond to security incidents, escalating or resolving issues as appropriate, and mentor other product security team members.
Requirements
- Extensive product security experience and the ability to lead security work across multiple product teams. - Strong knowledge of application and cloud security, secure design review, and threat modeling. - Ability to communicate technical security issues clearly to both technical and non-technical audiences. - Experience collaborating across architecture, engineering, DevOps, and cloud teams while accounting for business objectives.
Nice to have
- Experience using AI to support threat modeling or secure design reviews. - Knowledge of security frameworks and risk practices, such as NIST, ISO 27001, CIS, or GDPR. - Familiarity with container, serverless, network, application, and access-management security. - Software development experience, relevant security certification, or proficiency with Azure and AWS.
Benefits and work setup
The role is fully remote within the United States. The listing describes a bonus program, healthcare, retirement matching, life insurance, employee assistance, paid time off, and company holidays.