Product Security Engineer

📋 Description

• Support the implementation and adoption of Secure Software Development Lifecycle (SSDLC) practices
• Perform security reviews of application designs, system architectures, and infrastructure
• Participate in threat modeling exercises for new and existing products, helping identify threats
• Provide security guidance to product and engineering teams by applying established security
• Conduct security assessments, penetration testing, and validation testing across applications and
• Triage, validate, and assign vulnerabilities identified through security tools and assessments

🎯 Requirements

• 2+ years of hands-on experience in cybersecurity, application security, product security, or a
• Practical experience performing or supporting security assessments and penetration testing of web
• Familiarity with threat modeling concepts and methodologies such as STRIDE, with the ability to
• Understanding of vulnerability management fundamentals, including vulnerability validation
• Exposure to AI and LLM technologies with an interest in developing knowledge of associated security
• Working knowledge of modern application architectures, APIs, authentication and authorization

🎁 Benefits

• A great deal of freedom and trust. At Bloomreach we don’t clock in and out, and we have neither
• We have defined our 5 values and the 10 underlying key behaviors that we strongly believe in. We
• We believe in flexible working hours to accommodate your working style.
• We work virtual-first with several Bloomreach Hubs available across three continents.
• We organize company events to experience the global spirit of the company and get excited about
• We encourage and support our employees to engage in volunteering activities - every Bloomreacher