Sr. Product Security Engineer
Core
Lead security assessments of cloud-hosted applications and APIs, focusing on risk-based decision support for engineering and product teams.
Role type
Senior Product Security Engineer (IC)
Builds
Security assessments, threat models, and risk-based recommendations for cloud-hosted SaaS platforms, embedded devices, and AI-enabled products.
Domain
Water technology, cloud security, API security, AI security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cloud security assessment, API security assessment, Identity and access control (OAuth2/OIDC, SAML, JWT), Threat modeling, OWASP Top 10/API Security Top 10 knowledge, Proof-of-concept coding, Scripting/automation, Cloud architecture understanding
Preferred skills
AI/LLM security assessment, Embedded systems/IoT security, Advanced automation tooling, STRIDE methodology
Technologies
OAuth2, OIDC, SAML, JWT, OWASP Top 10, OWASP API Security Top 10, NIST AI Risk Management Framework, MITRE ATLAS, STRIDE
Responsibilities
Lead security assessments of cloud-hosted applications and APIs; Assess modern identity and access control implementations; Produce assessment reports for leadership; Conduct threat modeling and architecture reviews; Contribute to security standards and tooling; Support product security incident response (PSIRT)
Seniority
Senior, hands-on IC
