Product Security Engineer
Core
Building security into the product development lifecycle by identifying, assessing, and mitigating security risks across web, mobile, and API systems.
Role type
Senior Product Security Engineer
Builds
Secure product features and development workflows
Domain
Cybersecurity / Application Security
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Threat modeling, Secure design review, Web application security testing, Mobile application security (iOS/Android), DevSecOps practices, SAST/DAST tools, Security automation scripting (Python/Bash), Security analytics
Preferred skills
Container security (Docker/Kubernetes), Infrastructure as code security (Terraform/CloudFormation), Security frameworks (NIST/ISO 27001/SOC 2), Bug bounty programs, Compliance (PCI DSS/GDPR)
Technologies
AWS, Python, Bash, Docker, Kubernetes, Terraform, CloudFormation, SAST tools, DAST tools
Responsibilities
Design and conduct threat modeling sessions for new features and system architectures, Perform security testing of web applications, mobile applications, and APIs, Implement and maintain SAST and DAST tools in CI/CD pipelines, Develop automated security testing frameworks and scripts, Design and implement security metrics and KPIs for product security, Partner with engineering teams to provide security guidance and support
Seniority
Senior, hands-on IC
