Product Security Engineer
Core
Own daily product-security operations, triage customer security escalations, investigate security alerts, and drive vulnerability management to closure.
Role type
Product Security Engineer (Vulnerability Management & Operations)
Builds
Secure software delivery lifecycle, CI/CD pipelines, and internal adoption of security modules (STO, SCS)
Domain
AI Software Delivery Platform / DevSecOps
Required skills
Vulnerability management, SAST/SCA/Cloud scanning, CI/CD integration, OWASP Top 10, Supply chain security, Python/Go scripting, Cloud environments (AWS/GCP/Azure), Container security (Docker/Kubernetes)
Preferred skills
Penetration testing, Threat modeling, AI/LLM security (prompt injection, agents), Security tool evaluation
Technologies
Semgrep, Snyk, Prisma Cloud, OWASP ZAP, Burp Suite, Jenkins, GitHub Actions, Harness
Responsibilities
Triage customer security escalations and investigate alerts; Lead identification, triage, and remediation of vulnerabilities; Operate and tune SAST/SCA and cloud/container scanning tools; Integrate security controls into CI/CD pipelines; Promote internal adoption of security modules; Support release security advisories; Establish software supply-chain practices; Plan and support penetration tests; Evaluate and recommend security tools; Partner on incident response and compliance work.
Seniority
Mid-Senior, hands-on IC
