Staff Product Security Engineer

This is a fully remote position, open to applicants in California, +8 more states.

📋 Description

• Integrate with an engineering portfolio and take ownership of its security outcomes across both application and cloud security.

• Engage in portfolio planning and design cycles.

• Analyze roadmaps, architecture proposals, and technical designs.

• Lead and expand threat modeling initiatives across the portfolio.

• Prioritize systems, mentor squads, and monitor threats as requirements evolve.

• Provide guidance on secure architectures for cloud-native services, microservices, multi-tenant data access, identity management, secrets, and AI-enabled features.

• Maintain a security risk overview for the portfolio that is evidence-backed.

• Collaborate with portfolio VPs and engineering leaders to establish remediation priorities and ensure adherence to vulnerability SLAs.

• Facilitate risk acceptance and exception processes.

• Modify secure service templates, secrets management patterns, cloud configuration templates, CI/CD guardrails, and Infrastructure as Code (IaC) policy sets.

• Promote the use of SAST, SCA, secrets scanning, IaC scanning, container scanning, and Cloud Security Posture Management (CSPM).

• Improve the quality of security signals and differentiate between actual risks and noise.

• Review code and Terraform, collaborating with engineers on remediation efforts.

• Draft reference implementations and solutions.

• Recruit, mentor, and support security champions.

• Provide training, conduct design reviews, and hold office hours.

• Offer feedback to the security program and the Platform and Programs team.

• Contribute portfolio metrics related to coverage, remediation velocity, and risk trends.

• Assist in security incident triage and investigation while applying lessons learned to design and paved-road enhancements.

⛳️ Requirements

• 7-10+ years of experience in product security, application security, cloud security, or a closely related field of security engineering.

• Strong foundation in software engineering.

• Direct experience working with or alongside engineering teams is highly preferred.

• Proficient in secure code review, threat modeling, secure design, CI/CD, and supply chain security.

• Knowledge of cloud identity management and least privilege principles.

• Experience with IaC security, container and Kubernetes security, and cloud posture management.

• Proficient in reading and writing C#/.NET, Go, Java, or Python, with a preference for C#/.NET.

• Hands-on experience with security services in Azure and/or AWS.

• Familiarity with Terraform or Bicep.

• Demonstrated experience in leading threat modeling and architecture reviews at scale.

• Ability to translate threat modeling outcomes into actionable engineering requirements.

• Capability to build trust with VP-level engineering leaders and senior engineers.

• Experience in driving priorities through collaboration rather than authority.

• Comfortable with scripting and automating security tasks.

• Proficient in utilizing AI-assisted tools.

• Familiarity with securing AI-enabled features and AI coding agents.

• Understanding of risks associated with non-human identities, MCP integrations, and data exposure within AI systems.

• Certifications such as CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, OSCP, or similar are advantageous but not mandatory.

🏝️ Benefits

• Flexible time off.

• Opportunities for learning and development.

• Comprehensive onboarding program.

• Leadership training.

• Various programs and events.

• Bonusly rewards.

• Peer-nominated awards.

• Company-paid medical, dental, and vision insurance.

• 100% employer-paid options and 90% coverage for dependents.

• Flexible Spending Account (FSA) and Health Savings Account (HSA).

• 401k matching.

• Telehealth options, including One Medical memberships.

• Parental leave and support.

• Up to $20,000 in fertility services, including IUI and IVF.

• Reimbursement for surrogacy and adoption.

• On-demand maternity support through Maven Maternity.

• Free breast milk shipping through Maven Milk.

• Pet insurance.

• Legal advisory services.

• Financial planning tools.

• Annual bonus.

• Equity.

• Support for autonomous work.