Senior Staff Product Security Engineer

Job Summary

Recognized as a senior technical authority, the full-time Senior Staff Product Security Engineer will lead investigations and coordinate responses to significant product vulnerabilities within the Product Security Incident Response Team (PSIRT), operating in a flexible or remote work environment.

Key Responsibilities

• Lead and provide response coverage during significant security events, ensuring clear decision-making and structure under pressure
• Drive coordinated responses across affected releases, balancing risk and remediation feasibility while moving fixes through the release pipeline
• Lead the CVE disclosure process, collaborating with external partners and ensuring technical accuracy in advisories and publications

Required Qualifications

• Minimum 12 years of related experience with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years of experience
• At least 5 years of experience auditing source code for security vulnerabilities
• Demonstrated leadership during significant security events with a willingness to participate in on-call duties
• Proficiency in Java and JavaScript, including the ability to read and comprehend code and understand common vulnerabilities
• Experience leading fix implementation and release coordination across engineering, product, and test/release teams