DevSecOps & Product Security Engineer

📋 Description

• Embed security across the software development and deployment lifecycle
• Implement security checks, scanning, and quality gates across the SDLC
• Champion secure coding and remediation practices
• Review authentication, authorization, APIs, tenant isolation, and access controls
• Identify and mitigate OWASP and API security risks through threat modelling
• Assess AI agents, prompts, connectors, and data-access risks

🎯 Requirements

• Hands-on DevSecOps and application/API security experience
• Working knowledge of OWASP Top 10, Python backends, and React applications
• Strong GitHub and CI/CD security experience (pull requests, GitHub Actions, SAST, dependency and
• Experience securing Google Cloud environments (IAM, service accounts, least-privilege access, and
• Track record of cutting through scanner noise to assess real risk and drive practical remediation
• Strong communicator who is hands-on fixing issues, not just reporting them

🎁 Benefits

• Work across multiple modern product engineering teams and influence security architecture on real
• Build hands-on depth in AI security, cloud security, and application security — all in one role
• Build scalable security automation used across multiple global clients
• Partner directly with engineering, architecture, and product leadership — no ivory-tower security