Senior Product Security Engineer
Core
Define and own the product security roadmap, manage vulnerability processes, and embed security into the development lifecycle for web, mobile, and API services.
Role type
Senior Product Security Engineer
Builds
Secure web, mobile (iOS/Android), and API services; security tooling and automation pipelines
Domain
Travel technology, cloud-native, containerized environments
Required skills
Application security vulnerability management, threat modelling, secure coding practices, mobile app security testing, API security testing, CI/CD pipeline security, security standards compliance (OWASP, NIST, ISO 27001, GDPR, PCI DSS), security tool implementation and automation
Preferred skills
Security champions programme setup, risk assessment, regulatory compliance expertise
Technologies
SAST, DAST, vulnerability scanning tools, OAuth 2.0, OpenID Connect, API gateways, containerization, IaC
Responsibilities
Define product security roadmap and align with business goals; establish vulnerability management processes and track metrics; conduct threat modelling for web, mobile, and API services; perform code reviews and manage third-party penetration tests; secure mobile apps and APIs; implement and automate security tools; mentor teams on secure coding and establish security champions programmes
Seniority
Senior, hands-on IC (via careerplan.io/jobs/efd536cb-c784-453e-af57-1577b4e9150f-senior-product-security-engineer-at-trainline)
