Senior Product Security Engineer, Application Security

5+ years of experience in Application or Product Security, preferably in a SaaS or cloud-native environment. Strong understanding of web app and API security, microservices, and containerized architectures. Experience integrating security tooling into modern CI/CD workflows. Proficiency with SAST, DAST, IaC scanning, and container security platforms. Skilled in secure coding and code review for at least one major language (Python, Java, Go, JavaScript). Familiarity with AWS security, Kubernetes security, and DevSecOps best practices.

Lead application security initiatives across all SaaS products and microservices. Conduct threat modeling, architecture reviews, and secure code assessments. Implement and manage security automation in CI/CD. Collaborate with engineering teams to triage, prioritize, and remediate vulnerabilities. Drive AppSec awareness and training. Evaluate and deploy container security controls. Support bug bounty and vulnerability disclosure programs. Stay ahead of emerging application and container threats.