Product Security Engineer, Server

What you'll do

• Define strategy and drive improvements for security programs like fuzzing, threat modeling, and secrets management.
• Provide risk analysis and proof of concept to engineering teams responding to security issues.
• Design and implement security controls across software systems in partnership with engineering teams.
• Conduct proactive security assessments including architecture reviews, threat modeling, code reviews, and penetration testing.
• Research and prototype new attacks against internal systems to identify potential vulnerabilities.
• Develop architectural patterns and processes that make security the easiest path for developers.
• Educate the engineering organization through CTFs, lunch-and-learns, and one-on-one mentorship.
• Act as a subject matter expert for software security and architecture across the tech stack.

What we're looking for

• 3 years of experience in application security, software security, or product security.
• Demonstrated experience in C++ programming and performing security assessments on low-level codebases.
• Experience implementing remediation strategies for memory-related security flaws like buffer overflows and memory leaks.
• Proficiency in scripting and the ability to contribute code back to internal environments.
• Ability to lead threat modeling and serve as a security ambassador to engineering teams.
• Ability to communicate complex technical issues simply to build trust with various audiences.
• Experience in database security, data security, or knowledge of database internals and cryptography is preferred.
• Experience partnering with security researchers or managing administrative responsibilities for a CNA is preferred.