Incident Response Product Security Engineer II

Role overview Help investigate and manage software security and privacy incidents across a broad product portfolio. You’ll assess reported findings, explain their practical risk, and work with development teams to improve response practices, security testing, and communication.

Responsibilities - Apply the FIRST PSIRT Framework to support and improve the incident response lifecycle. - Validate and research security or privacy findings, then translate them into clear, concise issues. - Communicate investigation outcomes and present security and privacy risk measures to relevant audiences. - Facilitate red-team exercises that evaluate application security. - Identify recurring vulnerability patterns and privacy risks. - Maintain procedures, operating guidance, and best practices; collaborate with developers on technical papers, advisories, and articles.

Requirements - At least two years of CSIRT, CIRT, or PSIRT experience in an enterprise-scale environment. - Familiarity with FIRST, OWASP Top 10, SANS Top 25, CVE, and related security frameworks. - Experience with Burp Suite or comparable automated security testing tools. - Strong knowledge of Windows, Linux, cloud computing, networking, common weaknesses, and attack and defense methods. - Clear written and verbal communication, close attention to detail, and the ability to prioritize parallel work. - Bachelor’s degree in computer science, engineering, information systems, data science, or a related field. - Must be authorized to work for any U.S. employer; visa sponsorship is not available.

Nice to have - Relevant master’s degree; red, blue, or purple team testing experience; or familiarity with coordinated vulnerability disclosure. - Experience with geographic information system software, assessing AI security, or developing controls for FedRAMP or ISO certification. - Scripting in Python, Perl, Ruby, or shell, or development experience in Java, C++, or .NET.

Benefits and work setup - The posting lists medical, dental, vision, and life insurance; retirement and profit-sharing programs; at least 80 hours of vacation accrual; 12 paid holidays; and professional development opportunities. - The stated base salary range is $91,728–$148,512 USD. The role is marked remote.