Staff Security Engineer, Product Security and Architecture
$210,000–$234,100 year
On-siteAventura, Florida, United States
Job Summary
Automate and scale application security by building CI/CD pipeline tooling and tuning SAST, DAST, and SCA frameworks. Drive secure-by-design architectures by partnering with engineering teams to evaluate solution designs and provide technical feedback. Serve as a trusted advisor offering risk evaluations for new features, processes, and services while evangelizing secure practices across the organization. Cultivate collaboration to help product teams achieve delivery goals without compromising security, and accelerate operations by adopting AI-powered capabilities like code scanning copilots and AI Security Posture Management frameworks. Stay ahead of industry trends to ensure security capabilities keep pace with evolving business objectives.
Required Qualifications
- Bachelor's degree in Computer Science, a related technical field, or equivalent practical work experience
- Minimum of three (3) years of experience across the following areas: Administering and configuring automated pipeline tools (CI/CD)
- Minimum of three (3) years of experience across the following areas: Administering and tuning application security testing tools (e.g., SAST, DAST, or SCA)
- Minimum of three (3) years of experience across the following areas: Automation scripting using Python or Bash
- Minimum of three (3) years of experience across the following areas: Product development using Python, JavaScript, TypeScript, Golang, or Java
- Minimum of three (3) years of experience across the following areas: Performing security code reviews for solutions built in Python, JavaScript, TypeScript, Golang, or Java
- Minimum of three (3) years of experience across the following areas: Participating in security-focused reviews for both vendor and custom business solutions
- Minimum of three (3) years of experience across the following areas: Hands-on experience with Infrastructure as Code (IaC) tools (e.g., Terraform) to provision secure, reproducible infrastructure
- Minimum of three (3) years of experience across the following areas: Practical experience working with AWS services, aligning both product solution delivery and security objectives
- Minimum of three (3) years of experience across the following areas: Hands-on experience using Artificial Intelligence (AI) to assist with product security processes to drive team and operational efficiencies
Desired Qualifications
- Relevant industry certifications (e.g., CEH, CISSP, CSSLP, GIAC, or cloud security certifications)
- Direct experience working within high-performing DevOps and Agile cultures
- Experience with Layer 7 security controls (e.g., Web Application Firewalls (WAF), API Gateways, OAuth2/OIDC implementation, and rate limiting)
- Experience driving secure-by-design practices across multi-cloud strategies (e.g., AWS, Azure, GCP)
- Experience reviewing and assessing the use of AI technologies within both vendor-provided and custom-developed business solutions
- Experience operating in a publicly traded company, including familiarity with SOX-adjacent control environments and audit processes
- Experience securing environments through a merger, acquisition, or major infrastructure consolidation
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.