CyberSecurity, Product Security Engineer

Job summary

Responsibilities

As a Product Security Engineer within the Cybersecurity organization, you will be the dedicated security partner for one or more product organizations (such as Vibe, Studio or Forge).

• Serve as the dedicated Product Security partner for one or more product organizations.
• Drive security throughout the entire product lifecycle, from design and architecture reviews to production deployment and ongoing operation.
• Lead threat modeling, security architecture reviews and risk assessments for new features, APIs and major architectural changes.
• Define pragmatic security requirements and secure-by-default patterns that enable engineering teams to ship safely at high velocity for a specific product.
• Review critical designs and code, focusing on authentication, authorization, tenant isolation, data protection, cryptography and other high-impact security controls.

What they're looking for

• 5+ years of experience in Product Security, Application Security or Software Engineering with a strong security focus.
• Strong understanding of modern software architecture, distributed systems, APIs and cloud-native applications.
• Demonstrated experience performing threat modeling, architecture reviews and secure design assessments.
• Deep understanding of modern software security, including authentication, authorization, cryptography, secrets management, tenant isolation, secure data flows and common…
• Strong software engineering skills in Python, Go, TypeScript or similar languages, with the ability to review production code and build security automation.

Tech stack

• Python
• Go
• TypeScript