Senior Product Security Engineer
Core
Ensuring continuous security of customer-facing products and internal tools by proactively discovering weaknesses, driving risk remediation, and building secure development practices.
Role type
Senior Product Security Engineer
Builds
Product security APIs, tools, utilities, and security processes integrated into CI/CD pipelines
Domain
AI software delivery platform, cloud-native environments, DevSecOps
Deliverable
production ML models | product features | infrastructure
Required skills
DevSecOps practices, secure SDLC methodologies, cyber security frameworks (OWASP, SANS, NIST, CIS), software supply chain risk assessment, cloud environments (K8s, AWS, GCP, Azure), API development, Java or comparable OOP languages, security testing tools, vulnerability management workflows
Preferred skills
Threat modeling, adversarial attack simulation, SAST/DAST/SCA implementation, security architecture design, cross-functional collaboration
Technologies
K8s, AWS, GCP, Azure, Java, SAST, DAST, SCA, CI/CD pipelines
Responsibilities
Design and develop product security APIs, tools, and utilities; Conduct threat modeling and secure design reviews; Perform advanced penetration tests and adversarial attack simulations; Lead manual and automated code review efforts; Implement and operate security tooling (SAST, DAST, SCA) in CI/CD pipelines; Consult and advise developers on security standards and remediation; Assess risks and propose solutions for security features like authentication and authorization; Participate in creating technical security standards; Integrate security processes into the SDLC using the Harness platform
Seniority
Senior, hands-on IC
