Principal Product Security Engineer
Core
Lead complex application security engagements, perform advanced web application penetration testing, and conduct secure code reviews to identify vulnerabilities and strengthen controls across diverse products and platforms.
Role type
Principal Product Security Engineer (Application Security)
Builds
Secure-by-design software, security tooling, automation, and AI-driven assessment capabilities
Domain
Web application security, cloud-native architectures, DevSecOps
Required skills
Web application penetration testing, secure code review, threat modelling, authentication/authorization mechanisms, API security, cloud-native security, secure software engineering principles, OWASP methodologies, DevSecOps practices, infrastructure-as-code, automation/scripting, security tooling development
Preferred skills
Next.js, React, Node.js, Java, .NET, Go, GraphQL, REST APIs, microservices, application security program building, OSWE, OSEP, OSCP, GWAPT, GWEB, CISSP certifications
