Senior Product Security Engineer

Role overview Work as a Senior Product Security Engineer embedded with product and engineering teams to assess risk on new features and champion secure-by-design practices. Reporting to the Manager of Secure Design, this role focuses on early-stage reviews, threat modeling, automation, and mentorship across a high-scale cloud platform.

Responsibilities - Threat model application designs and provide security risk assessments, contributing roughly 70% of the role's focus. - Provide deep technical expertise across infrastructure, application, people, and process layers during holistic security assessments. - Collaborate with product managers, designers, and engineers to architect secure and resilient systems, then offer hands-on remediation guidance. - Champion an internal security culture through developer training, internal capture-the-flag events, and mentoring engineering teams. - Contribute to a vulnerability management program and help engineering teams understand how external security events affect them. - Build security tooling and automations that scale the team's practices and integrate into engineering workflows, representing about 10% of the role.

Requirements - Experience leading architectural changes or complex cross-team efforts to mitigate security vulnerabilities. - Ability to clearly communicate security topics and vulnerability classes (such as OWASP Top Ten) and give actionable direction to product teams. - A track record of partnering with engineering teams to tackle security problems across an entire stack with empathy and creativity. - Working knowledge of modern development concepts including virtualized environments, containerization, and continuous integration and delivery. - Three or more years guiding software teams on secure architecture design. - Experience building or reviewing threat models, including crafting malicious user, attacker, and abuse cases. - Familiarity with object-oriented and functional programming concepts, particularly Go, JavaScript, Rust, or C.

Nice to have - Working knowledge of hardware and software supply chain security.

Benefits and work setup - Remote role with a compensation range of $140,800 to $176,000, plus potential bonus and equity participation. - Reimbursement for relevant conferences, training, and education, plus access to a large library of on-demand learning courses. - Employee Assistance Program, local meetups, and a flexible time-off policy.