Product Security Engineer
$188,000–$250,000 year
HybridSeattle, Washington, United States or Hub, Steiermark, Republic of Austria
Job Summary
Collaborate with Product Engineering teams throughout the SDLC by creating Threat Models, conducting Design Reviews, Secure Code Reviews, and manual testing to identify vulnerabilities. Develop and implement end-to-end security solutions to mitigate risks across the product suite while helping drive improvements in Product Security tooling, automation, and the bug bounty program. Experiment with and develop AI-based tools to enable the Security team to move faster, acting as the voice of customers by engaging stakeholders to communicate security risks and trade-offs. Manage vulnerability disclosure programs and conduct security research on platforms like HackerOne or Bugcrowd to identify risks and build like an engineer to mitigate them.
Required Qualifications
- 3+ years of relevant experience in securing applications at scale
- Experience working at each touchpoint in a secure SDLC: threat modeling, design reviews, secure code reviews, and web app pentesting
- Familiarity with the standard Product Security tool suite: SAST, DAST, and SCA
- Experience with using AI to solve Security challenges at scale
- Software engineering or programming experience in at least one language, such as Java, Python, JavaScript, or Go
- Experience managing vulnerability disclosure programs or conducting security research on bug bounty platforms such as HackerOne or Bugcrowd
- The ability to think like an adversary to identify risk, and then build like an engineer to mitigate those risks
- Has a demonstrated ability to work independently with minimal guidance, proactively manages tasks and priorities across multiple projects, analyzes and executes work efficiently, collaborates effectively with cross-functional teams, and thrives in fast-paced, results-driven environments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.