Product Security Engineer
Core
Product Security Engineer responsible for embedding security throughout the product development lifecycle, identifying risks, and driving remediation for SailPoint's software products.
Role type
Senior IC Product Security Engineer
Builds
Secure software products and resilient security infrastructure for SailPoint's identity management platform
Domain
Cybersecurity / Application Security / DevSecOps
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Application security expertise, Threat modeling, Secure architecture design, Vulnerability management, Secure coding standards, CI/CD security controls, DevSecOps practices, Security testing tools (SAST, SCA, DAST, Container scanners), Programming languages (Python, Go, Java, JavaScript/TypeScript, Ruby), AI-powered security tools, AI security frameworks
Preferred skills
OWASP AI Security and Privacy Guide, NIST AI Risk Management Framework, Cybersecurity AI (CAI), Open SSF AI/ML Security Framework
Technologies
Kubernetes, Containerized applications, AI-assisted scanning tools, Bug bounty platforms
Responsibilities
Partner with Engineering to identify and mitigate security risks throughout the SDLC, Support threat modeling and implement security controls, Define and promote secure coding standards and best practices, Coordinate internal and external penetration testing, Validate vulnerability findings and prioritize remediation, Perform root cause analysis and recommend improvements, Collaborate on security monitoring and detection capabilities, Oversee remediation for security researcher disclosures, Develop security training and technical documentation
Seniority
Senior, hands-on IC
