Senior Product Security Engineer

What you'll do

• Lead high-priority product security initiatives to ensure timely delivery.
• Expand and mature the Secure Software Development Lifecycle (S-SDLC) program.
• Review product designs for security defects, perform threat modeling, and recommend remediations.
• Develop custom automated security solutions and integrate them into CI pipelines.
• Provide training and guidance on security best practices early in the SDLC to development teams.
• Cultivate a culture of security ownership within engineering and product teams.

What we're looking for

• 6-8 years of experience in Technical Product Security related to SSDLC tooling and automation.
• Proven ability to perform threat modeling, architecture reviews, and penetration testing for complex applications.
• Strong background in delivering critical product security initiatives at an organizational level.
• Expertise in cloud environments (AWS), application security testing tools, and infrastructure as code technologies.
• Deep knowledge of common application & network protocols, cryptographic primitives, and secure SaaS architecture.
• Experience working in Agile development with continuous integration and source code management systems.
• Ability to provide pragmatic security advice for web applications, mobile apps, and cloud software.