Software Engineer, Product Security

What you'll do

• Develop cloud-native, web, desktop, or distributed applications using secure coding practices.
• Build automated solutions to integrate security tooling into CI/CD pipelines for DevSecOps projects.
• Perform design reviews, code reviews, testing, troubleshooting, and deployment activities.
• Conduct threat modeling, security reviews, vulnerability remediation, and risk assessments.
• Integrate security requirements into product designs in collaboration with global engineering teams.
• Evaluate AI-generated outputs for quality, security, maintainability, and compliance with development standards.
• Participate in technical planning and prioritization to meet product and security goals.

What we're looking for

• Bachelor's Degree or equivalent years of relevant work experience.
• Legal authorization to work in the U.S.
• Typically requires 5 years of related experience (preferred).
• 3+ years of experience developing, testing, and maintaining production software systems in Python, Go, or TypeScript (preferred).
• Experience with Node.js, MongoDB, Kubernetes, Helm, REST APIs, microservices, containers, and cloud-native architectures (preferred).
• Experience with GitHub, Azure DevOps, CI/CD pipelines, and automated testing (preferred).
• Knowledge of SSDLC practices, common software vulnerabilities (OWASP Top 10, CWE), threat modeling, and security risk assessments (preferred).
• Exposure to DevSecOps tools (SAST, SCA, DAST, SBOM) and AI-assisted software development (preferred).