Senior Product Security Engineer

Accountabilities The Senior Product Security Engineer will play a key role in strengthening product security by embedding security practices into engineering processes, improving defensive capabilities, and partnering with teams to build secure software. This role requires a combination of technical expertise, strategic thinking, and a proactive approach to identifying and mitigating risks.

Develop and mature software assurance practices by integrating security throughout the software development lifecycle.

Perform security design reviews, threat modeling, and risk assessments for new features, releases, and architectural changes.

Partner with engineering teams to provide actionable guidance on secure coding practices and vulnerability remediation.

Manage security inquiries, investigate vulnerabilities, and conduct manual code reviews to identify potential risks.

Design, implement, and automate security controls using open-source tools to detect and respond to threats against cloud-based platforms.

Build security automation and tooling to improve vulnerability detection, monitoring, and response processes.

Support secure development practices through training sessions, workshops, and knowledge-sharing initiatives.

Promote a security-first culture by increasing awareness and adoption of best practices across technical teams.

Collaborate with developers and infrastructure teams to improve the security posture of applications, systems, and cloud environments.

Apply modern AI tools and techniques to optimize security workflows, analysis processes, and threat detection capabilities.

Requirements

The ideal candidate is an experienced application security professional with strong software engineering skills and a passion for securing modern cloud-based platforms. This role requires hands-on technical expertise, strong problem-solving abilities, and the ability to influence engineering teams through collaboration and communication.

6+ years of experience in application security, ideally within SaaS or cloud-based software environments.

Strong programming skills in Python and shell scripting, with experience building security automation and internal tooling.

Proven experience identifying and exploiting common web application and REST API vulnerabilities.

Hands-on experience securing containerized environments using Docker and Kubernetes.

Experience designing and implementing security controls across software development workflows.

Strong understanding of cloud security principles and experience working with platforms such as AWS, GCP, or Azure.

Ability to perform security reviews, threat modeling, vulnerability assessments, and secure architecture evaluations.

Strong analytical and problem-solving skills with a structured approach to complex technical challenges.

Excellent communication skills and ability to collaborate effectively with engineering and cross-functional teams.

Experience using AI tools and techniques to enhance security processes and workflows.

Experience securing AI or machine learning-based products is a strong advantage.

Knowledge of microservice architectures, distributed systems, and secure software design principles is preferred.

Experience managing cloud security tooling and open-source security solutions is a plus.

Benefits

Competitive annual base salary range of $121,000 - $204,500 , depending on skills, experience, qualifications, geographic location, and business needs.

Equity ownership opportunities through stock options for full-time employees.

Bonus opportunities as part of the total rewards package.

Fully remote work environment with flexible work-from-home options.

Comprehensive healthcare coverage, including medical, dental, vision, HSA, PPO, and mental health wellness plans.

401(k) retirement plan through Empower with company matching contributions up to 6% of annual salary.

Flexible, uncapped PTO program subject to manager approval.

12 weeks of paid parental leave, plus additional paid leave for birthing parents.

Supportive, people-first culture focused on innovation, trust, collaboration, and professional growth.

Opportunity to work on cutting-edge AI technology and solve complex security challenges at enterprise scale.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1