← All Positions
Product Security Engineer
About the Role
You will foster a culture of security engineering across the product lifecycle. You will perform security assessments, design secure architecture, and automate security controls to protect our customers and infrastructure.
What You'll Do
- Perform security design reviews and threat modeling for new features
- Implement security automation (SAST, DAST, SCA) in CI/CD pipelines
- Conduct internal penetration testing and manage external audits
- Triaging and managing vulnerability disclosure programs
- Educate engineering teams on secure coding practices
Requirements
- BS degree in Computer Science, Cybersecurity, or equivalent practical experience
- Experience in application security, penetration testing, or cloud security
- Proficiency in scripting skills (Python, Bash, or Go)
- Understanding of common web vulnerabilities (OWASP Top 10) and mitigation strategies
- Experience securing cloud-native environments (AWS, Kubernetes)
Nice to Have
- Relevant certifications (OSCP, CISSP)
- Experience with SOC 2 or ISO 27001 compliance frameworks
- Public bug bounty activity or CVE credits