Staff Application & Product Security Engineer
Core
Staff-level individual contributor owning the end-to-end application and product security posture, setting security standards, and building guardrails for SaaS and customer-hosted deployments.
Role type
Staff Application & Product Security Engineer
Builds
Secure software products (SaaS and on-premise) with integrated security controls, threat models, and vulnerability management.
Domain
Enterprise Software / Application Security / Product Security
Required skills
Application security, Product security, Secure software engineering, Threat modeling, SAST/SCA/Secrets scanning, Exploit reproduction, Coordinated disclosure, Secure defaults design, Multi-tenant isolation, AI/LLM security
Preferred skills
Java, TypeScript, Python, Go, AWS, Kubernetes, Terraform, Snyk, Burp Suite, NIST CSF, OWASP SAMM/ASVS, CSSLP, OSWE
Technologies
Java, TypeScript, Python, Go, AWS, Kubernetes, Terraform, Jenkins, Snyk, GitHub Advanced Security, Semgrep, Burp Suite
Responsibilities
Own and mature the Secure Software Development Lifecycle (SSDLC) including threat modeling and design reviews. Run risk-based triage and remediation for application vulnerabilities. Own the penetration testing program and vulnerability disclosure process. Define and enforce product security controls for SaaS and customer-hosted models. Lead developer security enablement and training. Own the security roadmap and partner with Product Management and Architecture.
Seniority
Staff, hands-on IC with program ownership
