Senior Product Security Engineer (Remote, Technology)

Job summary

The role involves joining a newly formed Security Enablement Team focused on integrating security practices into the product development lifecycle. The engineer will partner with product teams to ensure security is a fundamental aspect of system design and implementation.

Qualifications

• Several years of experience in production software engineering with a focus on security practices in engineering workflows.
• Understanding of the full software development lifecycle (SDLC) and how security integrates into it.
• Experience in identifying and resolving security vulnerabilities such as SQL injection and unsafe credential handling.
• Familiarity with CI/CD processes and adding security checks to deployment pipelines.
• Strong collaboration skills and ability to document processes effectively.

Responsibilities

• Develop lightweight SDLC checks for unsafe queries and credential handling integrated into developer workflows.
• Establish secure data access patterns and automated checks for regression in security measures.
• Create documentation and self-service tools to assist product engineers in making secure decisions.
• Automate evidence gathering for product-security controls to streamline compliance processes.

Skills

• Proficiency in backend and frontend security practices.
• Experience with SAST/DAST tools and dependency scanning is a plus.
• Ability to build tools that enhance developer productivity while maintaining security standards.

Education

• Relevant degree in Computer Science, Engineering, or a related field is preferred but not mandatory.

Tools

• Familiarity with security tools and practices relevant to cloud-native applications and software development.