Product Security Engineer

About the Role

Join our team as a Product Security Engineer, where you'll play a crucial role in safeguarding our products and ensuring the integrity and confidentiality of our users' data. This is an exciting opportunity to embed security best practices throughout the development lifecycle and contribute to a secure, robust platform. This is a full-time, remote position.

Responsibilities

• Conduct security reviews of product designs, code, and infrastructure to identify potential vulnerabilities.
• Collaborate closely with engineering teams to implement secure coding practices and integrate security into the SDLC.
• Develop and maintain security tools and automation to enhance our detection and prevention capabilities.
• Participate in incident response activities, including investigation, containment, and remediation of security incidents.
• Stay up-to-date with the latest security threats, vulnerabilities, and industry best practices.

Requirements

• Proven experience in product security, application security, or a related security engineering role.
• Strong understanding of common web application vulnerabilities (e.g., OWASP Top 10) and mitigation strategies.
• Proficiency in at least one programming language (e.g., Python, Go, JavaScript) for security tooling and automation.
• Familiarity with cloud security principles and practices (e.g., AWS, GCP, Azure).
• Excellent problem-solving skills and the ability to communicate complex security concepts clearly.

Nice-to-Haves

• Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001).
• Participation in bug bounty programs or responsible disclosure initiatives.
• Knowledge of containerization and orchestration technologies (e.g., Docker, Kubernetes).
• Relevant security certifications (e.g., OSCP, CISSP, CSSLP).