Senior Product Security Engineer

📋 Description

• Product Security Strategy: Implement and mature a software assurance model that embeds security into the earliest stages of our development lifecycle.
• Security Design Reviews: Analyze new features and product releases, performing threat modeling and providing actionable guidance to engineering teams.
• Vulnerability Management: Triage external security inquiries, perform manual code reviews to identify flaws, and advise developers on effective remediation techniques.
• Automated Defenses: Design and deploy automated controls using open-source tools to detect, alert, and respond to common attacks against our cloud platform.
• Security Knowledge Share: Facilitate internal training and workshops on security best practices, raising awareness and fostering a security-first culture across the organization.

🎯 Requirements

• Programming Proficiency: Python and shell scripting to build security automation and tooling.
• Software Security Experience: 6+ years in SaaS product security.
• Offensive Security Skills: Ability to manually identify and exploit common web app and RESTful APIs.
• Cloud & Container Expertise: Hands-on with Docker and Kubernetes deployments and hardening.
• Systematic Problem-Solving: Structured approach with strong communication and ownership.
• AI Fluency: Use modern AI tools to optimize security workflows.

🎁 Benefits

• Health & Wellness: Company-covered Healthcare Coverage plans for you and your family, including HSA, PPO, Vision, Dental and Mental Health Wellness plans.
• Retirement & Financial: 401(k) through Empower with company match up to 6% of your annual salary.
• Paid Time Off (PTO): Flexible-use PTO, unaccrued and uncapped, subject to manager approval.
• Parental Leave: 12 weeks of paid parental leave, with an additional 4 weeks paid for birthing parents.
• Equity: Opportunity to own Stock Options in the company.