Security Engineer

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }

Security Engineer

Location: Sunnyvale, CA / San Jose, CA



Work Arrangement: Onsite



Employment Type: Long-Term Contract

Job Summary

STAFFXPERT LLC is seeking a Security Engineer on behalf of our client in Sunnyvale, CA / San Jose, CA. The ideal candidate will have strong hands-on experience in application and product security, with expertise in threat modeling, vulnerability assessment, secure coding, and security testing.

This role will work closely with product engineering teams to identify, validate, and remediate security vulnerabilities while supporting automated security scanning and remediation initiatives.

Key Responsibilities

• Perform threat modeling, vulnerability triage, and exploitability validation.

• Analyze trust boundaries, attack surfaces, and data flows using methodologies such as STRIDE and PASTA .

• Reproduce vulnerabilities and develop proof-of-concepts (PoCs) and test harnesses.

• Conduct source-code reviews and debug security-related issues.

• Validate automated and AI-generated security patches through code-diff reviews and regression testing.

• Partner with product engineering teams to drive vulnerabilities through remediation and verified closure.

• Apply secure coding practices, including input validation, boundary checking, and safe memory access.

Required Qualifications

• Strong hands-on experience in Application Security or Product Security Engineering .

• Strong understanding of CWE, CVE, OWASP Top 10, vulnerability severity, and remediation SLAs .

• Experience with threat modeling methodologies and vulnerability assessment.

• Strong source-code review and debugging skills.

• Proficiency in at least two programming languages , including C++, Go, Java, or Python.

• Experience reproducing vulnerabilities and developing PoCs or security test harnesses.

• Solid knowledge of secure coding principles and software security best practices.

• Experience reviewing automated security fixes and performing regression testing.

• Strong collaboration skills with the ability to work directly with engineering teams and drive security issues to resolution.

Preferred Qualifications

• Experience with SAST, DAST, and automated security scanning tools .

• Experience with fuzz testing and differential testing.

• Knowledge of distributed systems and microservices architectures.

• Familiarity with AI-assisted code generation or automated security remediation tools .

• Experience with prompt tuning or debugging automated coding agents.