Senior Product Security Engineer

What you'll do

• Lead high-priority product security initiatives and ensure timely delivery.
• Expand and mature the Secure Software Development Lifecycle (S-SDLC) program.
• Review product designs for security defects, perform threat modeling, and recommend remediations.
• Develop custom automated security solutions to enhance application security.
• Provide training and guidance to development teams on integrating security early in the SDLC.
• Cultivate security ownership within product teams to promote a 'shift left' culture.

What we're looking for

• 6-8 years of experience in technical product security related to SSDLC tooling and automation.
• Proven ability to perform threat modeling, architecture reviews, and penetration testing for complex applications.
• Strong expertise in cloud environments (AWS), application security testing tools, and infrastructure as code technologies.
• Deep knowledge of common application & network protocols, cryptographic primitives, and secure SaaS architecture.
• Experience working in Agile development with continuous integration pipelines and defect tracking systems.
• Ability to provide pragmatic security advice for web applications, mobile apps, and cloud software.
• In-depth understanding of browser security and modern JavaScript frameworks (Angular).