Staff Engineer - Product Security

What you'll do

• Manage vendor and open-source tooling across multiple technology platforms.
• Build applications and automations to prioritize critical vulnerabilities for engineering teams.
• Develop and implement security policies and procedures for secure coding practices.
• Integrate security scanning tools more broadly within the enterprise environment.
• Stay updated on latest security threats and trends, providing guidance to junior engineers.

What we're looking for

• 6+ years of experience in application security or a related domain.
• Proficient in Java, Python, or Golang and CI/CD pipeline management (ADO pipelines & GitHub Actions).
• Experience with security tools like SAST, DAST, SCA, container scanning, and automated threat modeling.
• Strong analytical skills and knowledge of web application security standards (OWASP Top 10, NIST CSF, PCI-DSS).
• Ability to develop and implement security policies and procedures for secure coding practices.
• Excellent communication and collaboration skills for mentoring junior engineers.