Staff Product Security Engineer
Core
Securing Navan products by identifying risks early in the SDLC, developing application security tooling, and promoting a 'shift left' security culture.
Role type
Staff Product Security Engineer (Strategic IC)
Builds
Application security programs, automated security and anti-fraud solutions, Security as Code pipelines
Domain
Fintech / Travel Tech / Cloud Security
Deliverable
production ML models | product features | infrastructure
Required skills
Threat modeling, architecture reviews, application/cloud/mobile penetration testing, SSDLC tooling automation, mentoring engineers, pragmatic security advice for web/mobile/cloud, deep knowledge of protocols/cryptography, cloud operational models, secure SaaS architecture in containerized microservices
Preferred skills
Experience with Java Spring Framework, Hibernate, JavaScript/CSS, Angular, AWS, SAST/DAST/IAST/SCA tools, Terraform, Docker, Kubernetes, Jenkins, Github Actions, Jira, GitHub
Technologies
AWS, Java Spring Framework, Hibernate, JavaScript, CSS, Angular, Docker, Kubernetes, Jenkins, Github Actions, Terraform, SAST, DAST, IAST, SCA, Jira, GitHub
Responsibilities
Serve as architectural lead for high-priority product security initiatives; advise on Product Security Program strategy and roadmap; drive expansion of S-SDLC program; review product designs for security defects and perform threat modeling; work with engineers to identify tradeoffs and recommend ideal designs; design and develop security tools and processes; convert manual integrations to automated pipeline activities; lead definition and development of Security as Code solutions; provide training and guidance to development teams; cultivate security ownership in product teams; bring visibility to vulnerabilities for prioritization; help build Red Team and PSIRT functions
Seniority
Staff, strategic IC with cross-functional leadership
