Product Security Engineer
Core
Strengthen product security across the Software Development Lifecycle (SDLC) by driving vulnerability management, security assessments, remediation, Secure SDLC, and DevSecOps initiatives.
Role type
Senior Product Security Engineer
Builds
Secure software products and cloud-native infrastructure for enterprise customers
Domain
Cybersecurity, DevSecOps, Cloud Security
Required skills
Vulnerability triage and remediation, Secure SDLC implementation, DevSecOps integration, Risk assessment and analysis, Secure coding practices, Incident response and root cause analysis, Security standards development, Cross-functional collaboration, Cloud-native security (Kubernetes, Docker, AWS/Azure), API and IAM security
Preferred skills
CISSP, CSSLP, Security+, GIAC, CCSP, AWS Security, Azure Security
Technologies
Black Duck, AppScan, Qualys, SonarQube, Burp Suite, Kubernetes, Docker, CI/CD pipelines, AWS, Azure, Java, Python, Node.js, .NET
Responsibilities
Perform vulnerability triage, reproduction, validation, and risk assessment; Lead vulnerability identification, prioritization, and remediation across SAST, DAST, and penetration tests; Integrate security controls and scanning tools into CI/CD pipelines; Investigate and remediate product security incidents; Mentor teams on security best practices and deliver training
Seniority
Senior, hands-on IC