Senior Product Security Engineer

Navan

Quick summary

Work type
On-site
Location
Redwood City, CA
Salary
$113,400–$252,000 / yr
Posted
56 days ago

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $182k
This role $183k
$97k most similar roles pay here $269k

This role pays more than 53% of similar roles. Most pay $151,475–$212,343 — the shaded band above. At the midpoint, this role pays about $183k versus about $182k for comparable roles.

Based on 240 similar postings.

Employer

About Navan

Navan (formerly TripActions) is a travel and expense management platform that provides corporate travel booking, expense management, and card solutions to simplify business travel for enterprises. Industry: Travel Management & Financial Technology

Navan currently has 20 open roles on FindRole.

Listed pay typically runs $113,400–$252,000 across 7 roles with salary data.

Most-posted roles

View all roles at Navan

At a glance

TL;DR · Senior Product Security Engineer

As a Senior Product Security Engineer at Navan, you will join the Director of Product Security and Trust’s team to build and scale an application security program by integrating security into the development process. Your daily tasks include conducting security-related research and assessments, developing custom automated security solutions, and providing training to engineering teams early in the software development lifecycle (SDLC). You will work with cloud environments like AWS, use tools such as SAST, DAST, IAST, and Jenkins for CI/CD pipelines, and manage source code through GitHub. Ideal candidates have 6-8 years of experience in SSDLC tooling, threat modeling, and application security testing in high-risk industries, along with a deep understanding of cloud operational models and secure SaaS architecture in containerized microservices environments.

What you'll do

  • Lead high-priority product security initiatives and ensure timely delivery.
  • Expand and mature the Secure Software Development Lifecycle (S-SDLC) program.
  • Review product designs for security defects, perform threat modeling, and recommend remediations.
  • Develop custom automated security solutions to integrate into development processes.
  • Provide training and guidance on security best practices early in the SDLC.
  • Cultivate security ownership within engineering and product teams.

What we're looking for

  • 6-8 years of experience in technical product security around SSDLC tooling and automation.
  • Proven ability to perform threat modeling and architecture reviews for complex applications.
  • Experience delivering critical organization-wide product security initiatives.
  • Strong background in application, cloud, and mobile penetration testing in high-risk environments.
  • Deep knowledge of common application & network protocols and cryptographic primitives.
  • Expertise in integrating security testing tools into CI pipelines and working with modern development technologies.
  • Ability to provide pragmatic security advice for web applications, mobile apps, and cloud software.

More like this

Similar roles

Senior Product Security Engineer

Adobe

San Francisco +4 41 days ago $180,600$261,450
GitHub Actions Jenkins Kubernetes Terraform CI/CD Python Go Bash GitOps Secure SDLC Supply Chain Security Threat Modeling Cloud Native Systems Containerized Workloads Artifact Signing Open Source Risk Management

Senior Product Security Engineer - Software

Rockwell Automation

Remote (United States Of America Milwaukee (South 2Nd Street), US) 92 days ago
C# Java PHP .NET Core React Docker Kubernetes Go SQL HTML CSS JavaScript CI/CD SAST DAST SCA SonarQube Blackduck JFrog XRay PrismaCloud TCP/IP UDP HTTP HTTPS GitHub Mercurial Subversion AWS Azure GCP
Remote

Senior Product Security Engineer

Plaid

New York City 69 days ago $204,156$281,196
Python Django React PostgreSQL AWS RDS S3 Lambda CI/CD GitHub Kubernetes Terraform Docker GitLab Jenkins

Senior Product Security Engineer

Plaid

Seattle 69 days ago $204,156$281,196
Python Django React PostgreSQL AWS RDS S3 Lambda CI/CD Kubernetes Terraform Git GitHub Docker Jenkins

Senior Software Engineer - Product Security

Plaid

New York City 19 days ago $204,156$281,196
Python Java Go Ruby Node.js AWS Azure GCP Kubernetes Docker CI/CD Git GitHub Jira PostgreSQL MongoDB Redis OAuth OpenID Connect PCI DSS SOC 2 ISO 27001 DevSecOps