Senior Product Security Engineer
New
P
Priority Technology Holdings, Inc.Financial technology
Source API remote eligibility restrictions: United StatesFull-TimeSenior
SalaryUSD 115000 - 145000 / year
Apply NowOpens the employer's application page
Job Details
- Experience
- 5 years of experience in application security, product security, or a closely related technical role (e.g., DevOps or Application Development).
- Required Skills
- PythonJavaJavascript
Requirements
- Have 5 years of experience in application security, product security, or a closely related technical role.
- Bring deep expertise in at least two of web application security, API security, mobile security (iOS/Android), or cloud security; AWS is preferred.
- Demonstrate proficiency in one or more programming languages, such as Python, Java, or JavaScript, and the ability to work with production code.
- Have experience with modern software development and application security tooling, including SAST, DAST, and SCA.
- Have hands-on experience applying threat modeling methodologies to complex distributed systems.
- Be familiar with fintech-relevant security frameworks and standards, including PCI-DSS, SOC 2 Type II, FFIEC, NIST CSF, and ISO 27001.
- Communicate effectively with technical and business audiences.
- Preferred: experience securing fintech, payments, or regulated financial products.
- Preferred: experience with cloud-native architectures, modern CI/CD environments, red team exercises, penetration testing, or adversarial simulations.
- Preferred: security certifications such as CISSP, CSSLP, OSCP, or GIAC.
Responsibilities
- Own security design reviews and threat modeling for high-risk product areas, including payment processing, identity and access, fraud systems, and AI.
- Advise staff and principal engineers on secure architecture patterns, cryptography, and API security.
- Lead and execute application security assessments, red team exercises, and adversarial simulations in production and pre-production environments.
- Define and drive adoption of security standards, secure coding guidelines, and SAST/DAST/SCA tooling.
- Partner with Engineering and DevOps to improve security across CI/CD pipelines, cloud infrastructure, and container environments.
- Translate security risks into clear, prioritized recommendations for engineering leadership and product managers.
- Contribute to regulatory compliance across PCI-DSS, SOC 2 Type II, and other applicable guidance.
View Full Description & ApplyYou'll be redirected to the employer's site
