Job Opportunity:
The Senior Product Security Engineer will lead and advance our product and application security initiatives. This role demands deep technical expertise across all facets of product security and secure software development.
Main Responsibilities:
* Define and implement product and application security strategies throughout the SDLC
* Collaborate with product and engineering teams to design secure architectures for web, mobile, and cloud-based applications
* Integrate security best practices into CI/CD pipelines, promote secure coding practices, and conduct code reviews and threat modelling sessions
* Lead and perform penetration testing, static/dynamic code analysis, and security reviews for internally developed and third-party applications
* Develop and maintain automated security testing tools, workflows, and integrations to scale security across product teams
* Assist in investigation and remediation of security incidents related to products and applications
* Support various Compliance initiatives such as SOC2, ISO27001
* Educate engineers on secure development practices, influence engineering culture, and act as a liaison between security and engineering teams.
This role requires extensive experience in Cloud security engineering with a focus on application/product security, deep understanding of OWASP Top 10, secure coding, threat modelling, authentication/authorization, cryptography, and cloud-native application security.
Key Requirements:
* Extensive experience in Cloud security engineering with a focus on application/product security
* Deep understanding of OWASP Top 10, secure coding, threat modelling, authentication/authorization, cryptography, and cloud-native application security
* Compliance knowledge to include a thorough grasp of NIST 800-53, and other regulatory frameworks
* Experience with tools like SAST/DAST, SCA, container security, and languages like Python, Java, JavaScript, or Go
* Excellent communication and collaboration skills with the ability to drive cross-functional initiatives.
Bonus qualifications: Experience with Data Governance and Securing AI applications desirable, Certifications CISSP, CSSLP, GWAPT, or equivalent are a plus.