Product Security Specialist II

This is a fully remote position, open to applicants in Canada.

📋 Description

• Enhance security practices throughout the software development lifecycle.

• Assist in the AI governance program aimed at developers.

• Collaborate directly with developers, product management, customer experience teams, clients, and partners.

• Communicate security concepts to audiences with diverse technical backgrounds.

• Manage security questionnaires and assessments.

• Engage in security meetings driven by customers and partners.

• Draft and uphold security policies and documentation.

• Contribute to the risk register.

• Aid in compliance monitoring.

• Perform security and compliance evaluations of third-party libraries and vendor components, focusing on licensing and known risk indicators.

• Assist in formulating policies and standards for AI-assisted development.

• Monitor upcoming AI security risks.

• Support training and awareness initiatives across the Engineering organization.

• Facilitate the vulnerability disclosure process, including CVE registration and drafting security advisories.

• Participate in postmortems and lessons-learned analyses.

• Maintain ongoing security coverage for non-Engineering applications and services, including websites, APIs, internal tools, IT-developed scripts, and internal AI agents.

• Contribute to security KPI tracking, governance dashboards, and reporting for leadership and external stakeholders.

⛳️ Requirements

• A minimum of 3 years of experience in product security, application security, or a closely related cybersecurity position.

• A robust technical foundation in cybersecurity.

• Comprehensive understanding of common vulnerability categories, secure development practices, and security tools (e.g., OWASP Top 10, SAST, DAST, SCA).

• Ability to clearly convey security concepts to stakeholders with varying technical expertise.

• Strong analytical abilities and the capacity to interpret ambiguous or incomplete data.

• Proficiency in Python for automation, tooling, or analysis.

• Familiarity with Agentic AI.

• A degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.

• Knowledge of compliance frameworks such as SOC 2 or ISO 27001.

• Security certifications like CISSP or CISM.

• Familiarity with and/or experience in using and supporting FME in production environments.

🏝️ Benefits

• Bonus.

• Paid time off to volunteer for opportunities organized by Safe.

• Annual learning budget.

• Training programs funded by Safe.

• Flexible working hours.

• Flexible and remote-friendly work arrangements.

• 3 weeks of vacation.

• Additional paid 6 seasonal days off per year.

• Extended health benefits starting from day 1.

• Dental benefits starting from day 1.

• Health or lifestyle spending benefits available from day 1.

• Counseling benefits available from day 1.

• Parental Leave Top-Up Program.

• Bi-annual profit sharing.

• RRSP/TFSA matching.

• Complimentary parking.

• Bike storage.