Product Security Engineer, Secure Design

This is a fully remote position, open to applicants in United States.

📋 Description

• Deliver comprehensive technical expertise in software and network architecture during thorough security evaluations across infrastructure, applications, personnel, and processes.

• Work in partnership with product managers, designers, and engineers to develop threat models and design secure, resilient systems.

• Assess solution trade-offs and suggest effective designs that align with functional objectives and security standards.

• Offer practical remediation guidance to development teams.

• Advocate for an internal security culture through developer training and internal Capture The Flag (CTF) events.

• Guide software engineering teams on best practices in security.

• Assist in managing the vulnerability management program (security debt).

• Educate engineers on the implications of security incidents and vulnerabilities.

• Create security tools and automations to enhance Product Security practices.

• Incorporate custom security tools into engineering processes.

• Promote architecture, patterns, and procedures that facilitate security as the simplest option.

⛳️ Requirements

• Proven experience in leading architectural modifications or intricate cross-team initiatives to address security vulnerabilities.

• Capability to effectively communicate security concepts and vulnerability classifications, such as the OWASP Top Ten, and provide actionable guidance to product teams.

• Established record of collaborating with internal engineering teams to resolve security challenges across the entire tech stack.

• Proficient understanding of virtualized environments, containerization, and continuous integration and delivery practices.

• At least 3 years of experience advising software teams on secure architecture design (preferred).

• Experience in building or reviewing threat models and developing scenarios for malicious users, attackers, and abuse/misuse cases (preferred).

• Solid understanding of hardware and software supply chain security (preferred).

• Familiarity with object-oriented and functional programming principles, particularly in Go, JavaScript, Rust, or C (preferred).

🏝️ Benefits

• Reimbursement for relevant conferences, training, and educational opportunities.

• Access to over 10,000 courses on LinkedIn Learning.

• Employee Assistance Program.

• Opportunities for local employee meetups.

• Flexible time-off policy.

• Eligibility for bonuses based on company and individual performance.

• Equity compensation, including equity grants upon hiring.

• Option to participate in the Employee Stock Purchase Program.