Product Security Engineer (Application Security)

TL;DR

Product Security Engineer (Application Security): Securing applications by identifying design and implementation flaws and collaborating with product engineers to remediate defects with an accent on threat modeling, code review, and tool automation. Focus on hunting for security defects across the SDLC, hardening internal systems, and utilizing AI to enhance security workflows.

Location: Must be based in the USA

Salary: $120,000 - $180,000 per year

Company

Global leader in cybersecurity providing an AI-native platform designed to stop breaches and protect modern organizations.

What you will do

• Act as a security expert for engineering teams to influence product design and capabilities.
• Develop and maintain threat models using STRIDE to minimize the attack surface.
• Perform source code reviews in Go, Python, and Java to identify security risks and defects.
• Execute application penetration testing throughout the Secure Development LifeCycle.
• Build integrated tools and automation to streamline AppSec processes for the team and partners.
• Manage responses to the bug bounty program and conduct proactive vulnerability hunting.

Requirements

• Understanding of software delivery in Agile and DevOps environments.
• Experience with threat modeling, specifically the STRIDE framework.
• Ability to conduct security code reviews for applications built with Go, Python, or Java.
• Knowledge of secure configuration for cloud-native and containerized apps in AWS, Azure, or GCP.
• Experience with AppSec tools such as SAST, DAST, CSPM, DSPM, and ASPM suites.
• Must be based in the USA

Nice to have

• Experience developing automation for application security tasks.
• Knowledge of Docker and Kubernetes (k8s).
• Contributions to security enhancements in open source projects.
• Experience with threat intelligence driven testing and adversarial emulation.
• Ability to demonstrate security implications of AI-assisted development.

Culture & Benefits

• Market leader in compensation and equity awards.
• Comprehensive physical and mental wellness programs.
• Competitive vacation and holidays for recharge.
• Paid parental and adoption leaves.
• Professional development opportunities for all employees.
• Vibrant office culture with world-class amenities and employee networks.