Remote job
Senior Product Security Engineer
Job details
About this role
Role overview Work with product and platform engineers to build security into software throughout its development lifecycle. The role combines architecture reviews, threat modeling, hands-on testing, and secure coding guidance, with an emphasis on making findings clear and actionable so teams can address risks as they build.
Responsibilities - Partner with developers early in the software development lifecycle to identify and address security risks. - Review designs and architectures, and conduct threat modeling for new features and services. - Penetration-test web applications and APIs, then turn findings into prioritized remediation work. - Review code and help establish secure coding standards and security acceptance criteria. - Operate and tune static and dynamic application security testing, dependency, and software supply-chain scanning; triage the results. - Explain the causes and impact of findings to help prevent recurring vulnerabilities, and contribute evidence for security compliance programs.
Requirements - A track record of improving product or application security. - Hands-on penetration testing experience with web applications and APIs. - Strong understanding of modern web application components, including front ends, APIs, authentication, authorization, and sessions, and how they can be attacked. - Experience conducting security design reviews and threat modeling. - Understanding of the software development lifecycle and how to incorporate security into it. - Ability to communicate risks clearly and work directly with developers on fixes.
Nice to have Experience with open-source security testing and scanning tools, an offensive security certification, cloud and container security, or security programs such as SOC 2 or ISO 27001. Background in enterprise or regulated environments is also useful.
Benefits and work setup The listing describes the position as remote in the United States; it also includes a separate remote location reference to Brazil or Latin America.