Staff Security Engineer, Product Security
New
J
JobgetherProduct security
Based in the United States; Remote work opportunity within the United States.Full-TimeStaff
SalaryCalifornia: $148,210–$270,703 USD; Washington: $196,875–$270,703 USD; Colorado: $148,210–$185,263 USD; New York City: $196,875–$270,703 USD; Illinois: $148,210–$185,263 USD. Bonus and equity opportunities as part of the total rewards package.
Apply NowOpens the employer's application page
Job Details
- Experience
- Typically 8+ years of experience in product security, application security, or a related field. Demonstrated capabilities and work are valued more than an exact number of years.
- Required Skills
- PythonTypeScriptGo
Requirements
- Typically 8+ years of experience in product security, application security, or a related field; demonstrated capabilities and work are valued over an exact number of years.
- Have substantial hands-on experience building security tools and services, not exclusively conducting reviews.
- Have designed security architecture that scales across multiple teams, products, and services.
- Understand web application security principles and have practical experience with application security testing tools such as Burp Suite, OWASP ZAP, or similar.
- Have software development experience building security tools and services in at least one modern programming language, such as Go, Python, Java/Kotlin, TypeScript, or Ruby.
- Have led complex technical initiatives involving multiple engineering teams and driven adoption of shared security standards.
- Have experience mentoring engineers and supporting their progression into senior technical roles.
- Have strong architectural judgment and threat-modeling capabilities, and work collaboratively with engineering teams on practical solutions.
- Have experience establishing, managing, or scaling a security champions program.
- Know identity management and identity federation technologies, including SAML, OAuth, and SCIM.
- Have experience with IaaS cloud infrastructure, Kubernetes, container technologies, and service-oriented architectures.
- Have hands-on experience with bug bounty platforms and SAST tools such as Cycode, Semgrep, Snyk, or similar.
- Have experience conducting code audits of internal or open-source libraries before production release.
Responsibilities
- Establish security architecture, scalable patterns, and reference implementations for products and services.
- Lead security reviews for high-risk product features and set technical quality standards for reviews.
- Assess product domains and broader attack surfaces through threat modeling.
- Partner with engineering leadership to resolve significant security and architectural tradeoffs.
- Set standards for triaging, reproducing, and prioritizing bug bounty submissions and internal security reports.
- Identify recurring vulnerability patterns and lead initiatives to remediate underlying security weaknesses.
- Develop and maintain security services and tools used by product teams.
- Build and expand the security champions program and product security training.
- Mentor security engineers and lead cross-team technical initiatives.
View Full Description & ApplyYou'll be redirected to the employer's site
