Product Security Engineer

BS in Computer Science, Cybersecurity, Software Engineering, or related technical field, or equivalent experience. 3+ years of relevant experience in application security, secure software development, or penetration testing. Understanding of web application security and secure development practices. Understanding with common security libraries, security controls, and common security flaws. Experience with static/dynamic analysis, and common exploit methods. Experience in one or more programming languages (ideally Go or Javascript). Excellent written and verbal communication skills. Demonstrable teamwork skills and resourcefulness.

Support application vulnerability management and mitigation. Conduct application security reviews (manual code review or static/dynamic analysis). Engage in threat modeling and design reviews of in-house developed software components. Provide security guidance and training to internal development teams. Triage SCA findings and support remediation. Improve and/or automate existing processes.