Senior Product Security Engineer

Job summary

The role involves joining a newly formed Security Enablement Team focused on integrating security into product development processes. The engineer will collaborate with product teams to create secure systems by building tools and patterns that facilitate secure coding practices.

Qualifications

• Several years of experience in production software engineering with a focus on security in engineering workflows.
• Comprehensive understanding of the software development lifecycle (SDLC) and how security integrates into it.
• Practical experience in identifying and resolving security vulnerabilities such as SQL injection and unsafe credential handling.
• Familiarity with CI/CD processes and the ability to incorporate security checks into build and deployment pipelines.
• Strong collaboration skills and the ability to communicate effectively with diverse teams.

Responsibilities

• Develop lightweight SDLC checks for unsafe queries and credential handling integrated into developer workflows.
• Establish safe data access patterns and automate checks for security regressions in product surfaces.
• Create documentation and self-service tools to assist product engineers in making secure choices.
• Automate evidence collection for product-security controls to streamline compliance processes.

Skills

• Experience with SAST/DAST tooling, dependency scanning, and cloud-native application security is a plus.
• Generalist knowledge across backend and frontend development.
• Ability to build tools that enhance developer productivity without introducing friction.

Education

• Relevant degree in Computer Science or a related field is preferred but not mandatory.

Tools

• Familiarity with security tools and practices relevant to software development and deployment.