Security Engineer, Product Security
New
J
JobgetherProduct security
Remote work opportunity within the United States.Full-TimeMiddle
SalaryCalifornia: $130,950–$202,125 USD. Washington: $147,000–$183,750 USD. Colorado: $148,210–$163,688 USD. New York City: $147,000–$183,750 USD. Illinois: $148,210–$163,688 USD. Bonus and equity opportunities as part of the total rewards package.
Apply NowOpens the employer's application page
Job Details
- Experience
- Typically 2–5 years of experience in product security, application security, or software development with a security focus.
- Required Skills
- AWSPythonRuby
Requirements
- Typically 2–5 years of experience in product security, application security, or software development with a security focus; practical work and demonstrated skills are valued over an exact number of years.
- Strong understanding of web application security principles and common attack vectors, including the OWASP Top 10.
- Proficiency with application security testing tools such as Burp Suite, OWASP ZAP, or browser developer tools.
- Working knowledge of at least one modern programming language, such as Ruby, Java/Kotlin, TypeScript/JavaScript, or Python.
- Experience with at least one major cloud provider: AWS, Google Cloud Platform, or Microsoft Azure.
- Ability to assess application and architectural risks and conduct threat modeling.
- Ability to collaborate with software engineers on secure design decisions.
- Comfort participating in a security on-call rotation and taking on responsibilities across security disciplines.
Responsibilities
- Define security architecture for products and services, including reusable patterns and reference implementations for secure-by-default development.
- Lead security reviews for high-risk product features and establish technical quality standards for reviews.
- Lead domain-specific threat modeling and assess attack surfaces across the product environment.
- Partner with engineering leadership to resolve security tradeoffs and guide secure product design.
- Set standards for triaging, reproducing, and prioritizing bug bounty submissions and internal security reports.
- Handle complex or high-severity security cases and drive remediation of recurring vulnerability classes.
- Manage security services and tools used by product engineering teams.
- Build and scale the security champions program and product security training.
- Mentor security engineers and serve as a technical authority on product security.
- Participate in the security on-call rotation and support work across security disciplines.
View Full Description & ApplyYou'll be redirected to the employer's site
