Staff Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the technical direction and implementation of Delinea's Product Security Program

• Develop the comprehensive strategy and multi-year plans for the Product Security Program

• Conduct secure design evaluations, threat modeling, and product risk assessments

• Offer consulting services in Product Security

• Provide guidance on secure design practices for Delinea products and services

• Work collaboratively with teams in Enterprise Architecture, Development, DevOps, and Cloud engineering

• Engage in security audits and address customer security inquiries

• Establish organizational policies and standards for product and cloud security

• Collaborate with teams to embed best practices for cloud security

• Lead as a security thought leader across Delinea’s product offerings

• Advocate for the adoption of security architecture in product strategies and roadmaps

• Enhance and develop Delinea’s S-SDLC program

• Create foundational security standards for cloud, container, application, and infrastructure

• Incorporate security standards and testing within CI/CD pipelines

• Automate operational tasks to maintain product and cloud security infrastructure

• Address, resolve, or escalate security incidents as needed

• Mentor and support team members in Product Security

• Stay updated on the threat landscape, technological advancements, compliance regulations, standards, and industry trends

• Report directly to the Senior Director of Product Security

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience

• A minimum of twelve (12) years of professional experience in Cybersecurity

• At least seven years in a Product Security role, including Security Architecture, Threat Modeling, Secure Design, and AppSec tooling

• Familiarity with the current Product Security threat landscape and industry best practices

• Proven experience in Threat Modeling and Product Security design reviews, integrating them into SSDLC processes

• Expertise in cloud security

• Proficient in cryptography

• Experience conducting secure design reviews and threat modeling

• Knowledge of SaaS multi-tenant product architecture

• Experience with REST APIs

• Familiarity with container technologies such as Docker or Kubernetes

• Experience in integrating security testing tools into development pipelines

• Proficient with defect tracking tools like Jira, Bugzilla, or ServiceNow

• Experience with source code management tools such as ADO, GitLab, or GitHub

• Proficient in application security testing tools, including SAST, DAST, IAST, or SCA

• Excellent leadership, communication, interpersonal, analytical, and prioritization skills

• Ability to articulate technical security issues in accessible language

• Experience utilizing AI capabilities for Product Security initiatives

• Understanding of cybersecurity frameworks, risk management principles, and industry standards such as NIST, ISO 27001, CIS, or GDPR

• Knowledge of container security, serverless security, network security, application security, and access management

• Background in software engineering and/or development

• Relevant cybersecurity certifications like CISSP, CSSLP, or CISM

• Proficient with Azure and AWS platforms

• Capability to undergo a thorough criminal background check and verification of education and employment upon a conditional offer

🏝️ Benefits

• Equity

• Performance-based bonus programs or role-specific incentive plans

• Healthcare insurance

• Pension/retirement matching

• Comprehensive life insurance

• Employee assistance program

• Paid time off plans

• Paid company holidays

• Opportunities for career advancement

• Engaging work and a culture of innovation