Senior Product Security Engineer

Job Summary

To support a growing security initiative, the full-time Senior Product Security Engineer will embed security into the product development lifecycle, focusing on identifying risks, conducting security reviews, and performing application security testing in a remote work environment.

Key responsibilities

• Perform security design and architecture reviews, threat modeling, and application security posture assessments
• Conduct manual penetration testing and secure code reviews while collaborating with engineering teams on vulnerability remediation
• Drive the adoption of secure coding practices and develop reusable security patterns and reference architectures

Required qualifications

• 5+ years in Product Security or Application Security
• Strong understanding of modern application architectures, including web applications, APIs, and microservices
• Experience performing threat modeling and conducting penetration testing
• Familiarity with OWASP Top 10, secure SDLC, and security tools such as SAST and DAST
• Experience partnering directly with engineering teams to enhance security practices