Security Engineer - Product Security

📋 Description

• Partner with engineers to review designs and identify security risks and mitigations.
• Perform threat modeling for new features; document risks, assumptions, and controls.
• Identify and remediate vulnerabilities across services and APIs (auth, data).
• Triage and support remediation of vulnerabilities found via SAST/DAST or third-party findings.
• Conduct security testing and validation including high risk area testing.
• Help improve secure dev practices with guidance, checklists, and patterns.

🎯 Requirements

• 2–5 years in Product Security or application security.
• Strong knowledge of web app and API security and OWASP Top 10.
• Experience with security reviews, threat modeling, or secure architecture.
• Familiar with SAST/DAST, dependency scanning, fuzzing, and manual testing.
• Comfort reading production code in Python, Go, Java, or JavaScript/TypeScript.
• Able to work cross-functionally and drive remediation.

🎁 Benefits

• Cloud native architectures with AWS/GCP/Azure and Kubernetes experience.
• Experience tuning security tools to reduce noise and improve signal.
• Secure SDLC practices and security champions programs.
• Bug bounty or vulnerability disclosure with external researchers.
• Internal security automation or AI-assisted tooling experience.