Staff AppSec / Product Security Engineer
New
F
FiligranCybersecurity software
Location: France; Workplace: RemoteFull-TimeStaff
SalaryCompetitive compensation + equity
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of experience in software engineering and application or product security, including at least 3 years as the security technical reference for a SaaS or enterprise product
- Required Skills
- GraphQLNode.jsPythonJavaTypeScriptRust
Requirements
- Hold a master’s degree in computer science and/or cybersecurity.
- Have 8+ years of experience in software engineering and application or product security.
- Have at least 3 years as the security technical reference for a SaaS or enterprise product.
- Write production code fluently in at least two of Python, Node.js, TypeScript, Java, or Rust.
- Know web and API security in depth, including GraphQL, OIDC/SAML, RBAC, multi-tenant isolation, SSRF, and injection.
- Have knowledge of CI/CD security tooling and container and Kubernetes security.
- Have led a cross-team security initiative, coached engineers, and secured adoption of standards.
- Be comfortable working in a remote, async-first environment.
- Be comfortable using AI-powered tools such as LLMs, automation, and copilots to improve workflows and productivity.
- Bring a strong interest in AI and its applications in cybersecurity.
Responsibilities
- Advise the CISO on product security strategy across the XTM platform and lead its operational implementation in product teams.
- Track security technical pains through to resolution and turn priorities into concrete actions.
- Lead threat modeling and security reviews during feature refinements with Product Owners.
- Review critical pull requests, deliver security fixes, and build shared secure-by-default components.
- Drive secure SDLC and supply chain tooling in CI, including scanning, Renovate, Snyk, SBOMs, and signed releases.
- Manage product vulnerability intake, coordinated disclosure, CVEs and advisories, remediation SLAs, and the product side of security incidents.
- Mentor engineers through pairing, workshops, and continuous feedback, and grow a network of security champions.
- Document security architecture decisions to support consistency across teams.
- Leverage AI tools and methodologies to improve productivity and contribute AI capabilities to internal workflows.
View Full Description & ApplyYou'll be redirected to the employer's site
