Senior Product Security Engineer

Role overview

Lead hands-on security work across customer-facing software and internal tools. You’ll help engineering and product teams find and fix risks, strengthen secure development practices, and build tools and processes that make security part of the software lifecycle.

Responsibilities - Design security APIs, tools, and utilities for internal and external users. - Threat-model backend services and integrations, and review designs for security risks. - Test applications, APIs, and code through penetration testing, attack simulations, and manual or automated review. - Operate security testing tools, including static, dynamic, and dependency analysis, and connect them to CI/CD pipelines. - Advise developers and product managers on security architecture, standards, vulnerability fixes, and authentication or authorization decisions. - Help establish security standards and integrate vulnerability management into development workflows.

Requirements - Bachelor’s degree in computer science or a related field. - At least five years of relevant industry experience with a strong security focus. - Experience with DevSecOps, secure development lifecycles, security testing, and vulnerability management. - Working knowledge of security frameworks such as OWASP, SANS, NIST, or CIS, and software supply chain risks. - Experience with cloud environments, such as Kubernetes and a major public cloud, and with enterprise applications, APIs, and modern delivery practices. - Proficiency in Java or a comparable language, with knowledge of object-oriented programming.