Senior Product Security Engineer, Assessments

What you'll do

• Conduct deep-dive penetration tests and security assessments including architecture reviews and threat modeling.
• Perform static and dynamic code analysis to identify and verify vulnerabilities.
• Research and prototype new attack vectors to strengthen defensive measures.
• Develop and deploy AI-based tooling to enhance threat modeling and assessment workflows.
• Recommend secure coding patterns, container security measures, and secrets management strategies.
• Partner with engineering teams to remediate vulnerabilities and advocate for security best practices.
• Coordinate with red teams and detection functions to address security incidents and monitoring capabilities.

What we're looking for

• 7+ years of experience in application security, product security, or penetration testing roles using manual and automated approaches.
• Proven expertise in threat modeling, penetration testing, red teaming, and secure code reviews.
• Programming and scripting skills with familiarity in one or more languages such as Python or Golang.
• Hands-on experience with one or more major cloud providers including AWS, GCP, or Azure.
• Experience leading threat modeling workshops and communicating technical findings to both technical and non-technical audiences.
• Working knowledge of large-scale distributed systems and container technologies such as Kubernetes and Docker.
• Knowledge of security tools and frameworks for cloud and application security.
• Demonstrated ownership of security initiatives with the ability to deliver results autonomously or collaboratively.