Senior Staff Product Security Engineer
Core
Provide technical and organizational leadership during significant product security incidents, coordinate incident response, drive remediation, and lead CVE assignment and disclosure processes.
Role type
Senior Staff Product Security Engineer (Incident Response & Disclosure)
Builds
Secure releases and incident response capabilities for SaaS platforms
Domain
Software Security / Product Security
Required skills
Incident response leadership, CVE assignment and disclosure, root-cause analysis, exploit analysis, proof-of-concept development, secure development practices, SDLC integration, CI/CD pipeline familiarity, AI integration in security processes, Java/JavaScript code review, Python/JavaScript scripting, SaaS threat modeling
Preferred skills
PSIRT experience, vulnerability research expertise, ServiceNow platform security, AI-specific attack vectors, software supply chain security, containerized environments, security certifications (OSWE)
Technologies
Java, JavaScript, Python, SaaS platforms, CI/CD pipelines, ServiceNow, containerized environments
Responsibilities
Coordinate incident response with engineering and product teams, drive remediation across affected releases, lead CVE assignment and coordinated disclosure, conduct technical reviews of advisories and researcher reports, author postmortems and drive lessons learned, provide scheduled coverage for evening and overnight UTC shifts
Seniority
Senior Staff, hands-on IC with leadership responsibilities
