Product Security Engineer, Secure Design

Role overview

Join a product security function focused on embedding security into architecture and product decisions from the earliest stages. You will assess risks across applications, infrastructure, people, and processes; partner closely with product and engineering teams; and turn security guidance into practical design and remediation choices. The role combines threat modeling, technical advisory work, security enablement, and automation.

Responsibilities

- Lead threat modeling and security risk assessments for application designs, services, and technical solutions. - Evaluate software and network architectures, explain trade-offs, and recommend designs that balance security with delivery goals. - Work directly with product managers, designers, and engineers to improve system resilience and provide actionable remediation guidance. - Promote secure engineering through training, internal security exercises, mentoring, and clear explanations of vulnerability impact. - Help manage vulnerability-related security debt and advise teams on the relevance and urgency of emerging security events. - Build patterns, integrations, and automation that make secure practices easier to adopt within engineering workflows.

Requirements

- Experience leading architectural changes or complex, cross-team efforts to mitigate security vulnerabilities. - Ability to explain security concepts and vulnerability classes, including the OWASP Top Ten, in clear and actionable terms. - Demonstrated ability to partner empathetically with engineering teams on security issues spanning an entire technology stack. - Working knowledge of virtualized environments, containerization, and continuous integration and delivery. - At least three years guiding software teams on secure architecture design. - Experience creating or reviewing threat models, including attacker, malicious-user, abuse, and misuse cases.

Nice to have

- Knowledge of hardware and software supply-chain security. - Familiarity with object-oriented and functional programming concepts, particularly Go, JavaScript, Rust, or C.

Benefits and work setup

- Fully remote position. - Listed base salary range of $113,600–$142,000, with potential additional bonus and equity compensation. - Professional development support may include training, education, conferences, learning resources, and flexible well-being benefits.