Product Security Engineer

Description

Job Title: Product Security Engineer

Location: Remote role ( *Open to remote in San Jose, CA or McLean, VA* )

Duration: 5 months contract role

Pay rate: $90-92.69/hr. On W2 (Without Benefits)

The ideal candidate should have over 4 years of experience in vulnerability management.

You will use their expertise to make consistent risk-based decisions when partnering directly with engineering product teams to manage their vulnerability backlog and risk hygiene.


Specifically, Youll do:

Act as the technical security point-of-contact when partnering directly with engineering product teams

Strategically prioritize the risk reduction of vulnerabilities

Drive vulnerabilities to remediation within SLA

Act as the lead security contact during incidents

Own metrics and escalations, such as Time-To-Remediation and SLA adherence, to ensure visibility of engineering product teams risk posture

Identify and implement strategic improvements and paved road solutions to improve resilience


Skills:

Vulnerability Management / Triage

Vulnerability Risk Assessment

Vulnerability Incident Response

Knowledge of application security vulnerabilities (OWASP Top 10) and mitigation techniques

Knowledge of infrastructure vulnerabilities, mitigation techniques, and tooling (e.g. Spotlight Crowdstrike, Rapid7 Nexpose)

Dependability: Meets commitments, works independently, accepts accountability, handles change, sets personal standards, stays focused under pressure

Strong understanding of common security concepts that support root-cause analysis to make data-driven decisions on vulnerability patterns and trends

Ability to speak and communicate professionally


Education:

Bachelors degree in computer science, engineering, or a related subject area