Product Security Engineer

Job Summary

To enhance product security, the remote-friendly Product Security Engineer will collaborate with Engineering and Product teams throughout the development lifecycle, conducting threat modeling, identifying vulnerabilities, and implementing security solutions for new products and technologies.

Key responsibilities

• Conduct threat modeling and security design reviews early in the product development process to identify potential issues
• Analyze application architecture, APIs, and cloud services to uncover vulnerabilities and assess real risks
• Improve security tooling and automation across the development lifecycle to enhance the efficiency of security processes

Required qualifications

• Experience in product security, application security, software engineering, or penetration testing
• Proficient in threat modeling, architecture review, and vulnerability assessment without relying solely on checklists
• Familiarity with SAST, DAST, and other security scanning tools, with a focus on obtaining actionable results
• Ability to read and write code, with experience in automation using Python, JavaScript, or similar languages
• Knowledge of security frameworks such as OWASP Top 10 or NIST in practical applications