Senior Product Security Engineer
Core
Ensuring continuous security of customer-facing products and internal tools by proactively discovering weaknesses, driving risk remediation, and building secure development practices.
Role type
Senior Product Security Engineer (hands-on IC)
Builds
Product security APIs, tools, utilities, and security integration into CI/CD pipelines
Domain
Cloud-native software delivery, DevSecOps, API security
Required skills
Threat modeling, penetration testing, SAST/DAST/SCA implementation, secure SDLC, cloud-native security (K8s/AWS/GCP/Azure), Java, API development, vulnerability management
Preferred skills
Cyber security frameworks (OWASP/SANS/NIST/CIS), software supply chain risk assessment, security architecture consulting
Technologies
Java, K8s, AWS, GCP, Azure, SAST, DAST, SCA
Responsibilities
Design and develop product security APIs and tools; Conduct threat modeling and secure design reviews; Perform advanced penetration tests and adversarial attack simulations; Lead manual and automated code review efforts; Implement and operate security tooling in CI/CD pipelines; Consult and advise developers on security standards and remediation
Seniority
Senior, hands-on IC
