Product Security Engineer
Core
Maintain security and privacy for a global mental health benefits platform by integrating security into the SDLC, managing vulnerabilities, and securing cloud infrastructure.
Role type
Product Security Engineer (IC)
Builds
Secure web and mobile applications, cloud infrastructure, and information security management systems for employers and employees.
Domain
Health Tech / Mental Health / SaaS
Deliverable
production ML models | product features | infrastructure
Required skills
Vulnerability management, secure code review, threat modeling, secure software development practices, cloud security (AWS), scripting (Python/Bash), penetration testing, security tooling deployment (SAST/DAST/Vault), AI security integration
Preferred skills
Experience with AI systems security, agile security integration, cross-functional stakeholder collaboration
Technologies
AWS, Hashicorp Vault, SAST, DAST, Python, Bash
Responsibilities
Analyze security vulnerabilities in web and mobile applications; Research emerging vulnerabilities and mitigation techniques; Partner with Engineering to integrate security into the SDLC; Develop cost-effective solutions for application security challenges; Implement product security standards and best practices; Test and audit cloud infrastructure configurations; Guide engineering teams in secure coding standards; Deploy and manage security tooling; Participate in threat modeling initiatives; Conduct secure code reviews; Execute penetration tests; Collaborate on IT security initiatives; Engage with Cloud Security efforts to improve cloud architecture and controls.
Seniority
Mid-level, hands-on IC
