Product Security Engineer, Application Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate with engineering teams as a security expert and advisor, shaping the design and functionalities of our products.

• Develop and sustain threat models to guide security choices and reduce the threat surface area.

• Conduct reviews of application source code to identify security flaws and risks.

• Perform attacks on applications throughout the Secure Development LifeCycle.

• Partner with developers to help them comprehend defects, risks, design vulnerabilities, and implement effective solutions.

• Create integrated tools and automation to simplify processes for yourself, your team, and our engineering partners.

• Support our bug bounty program, search for related issues, and enhance the security of our applications.

⛳️ Requirements

• A solid understanding of how software products are developed and delivered in Agile/DevOps-like settings.

• Moderate experience in threat modeling, particularly using the STRIDE methodology.

• Experience in code review for applications developed in Go (Golang), Python, or Java.

• Familiarity with secure configuration practices for cloud-native and containerized applications in one or more cloud platforms (GCP, Azure, AWS).

• Experience with or maintaining commercially available AppSec tools such as SAST, DAST, CSPM, DSPM, and ASPM suites.

• An understanding of common software vulnerabilities affecting cloud and web applications (beyond just the OWASP Top 10) and experience in application penetration testing.

• Comfort in collaborating with various technical teams: asking technical questions, challenging assumptions, and providing or obtaining context for decisions.

• Experience in leading ambiguous research projects.

• Proven ability to leverage AI technologies to improve decision-making, streamline workflows and processes, enhance efficiency, and drive business results.

🏝️ Benefits

• Leading market compensation and equity awards.

• Comprehensive wellness programs focusing on both physical and mental health.

• Competitive vacation and holiday offerings for rejuvenation.

• Paid parental and adoption leave policies.

• Opportunities for professional development available to all employees, regardless of their level or role.

• Employee Networks, local groups, and volunteer opportunities to foster connections.

• A vibrant office culture equipped with world-class amenities.

• Recognized as a Great Place to Work Certified™ globally.