Senior Product Security Engineer

Senior Product Security Engineer

On Site

San Ramon, California, United States

Cloud Software Group combines the capabilities of both Citrix and TIBCO, creating one of the world's largest cloud software providers, serving more than 100 million users around the globe. When you join Cloud Software Group, you are making a difference for real people, each of whom count on our suite of cloud solutions to get work done – from anywhere. Members of our team will tell you that we value diverse lived experiences, varied perspectives, and having the courage to take risks. Our teams are encouraged to learn, dream, and build the future of work. We are on the brink of another Cambrian leap - a moment of immense evolution and growth. And we need your expertise and experience to do it. Now is the perfect time to move your skills to the cloud.

YOU as a Senior Product Security Engineer will have the opportunity to collaborate with the brightest engineering minds and work on innovative product security areas.

Senior Product Security Engineer is responsible for executing the Security Development Lifecycle (SDL) for Cloud Software Group On-Prem and Cloud products to ensure that our software meets the customer expectation of security robustness. and drive and execute SDL best practices

You will be responsible for executing the Secure Software Development Lifecycle (SSDLC) for Cloud Software Group On-Prem and Cloud products to ensure that our software meets the customer expectation of security robustness.

You will guide product development teams on design changes as per security requirements.

Perform targeted, high-impact source code reviews (C, C++, C#) integrated with modern AI-assisted tools.

Execute the penetration tests internally to identify security vulnerabilities.

You have a Full-time degree in Engineering (Preferably Computer Science related)

You are an expert in at least one of these areas in security – Windows / Unix System, Network, Cryptography

Strong C, C++, C# skills

Strong Linux and Windows internals knowledge, including low-level system architecture.

Good knowledge of Networking (TCP/IP) and other protocols like DNS, et.al.

Basic understanding of File system concepts.

Experience with object-oriented design concepts.

Extensive knowledge of common vulnerabilities - able to explain and remediate the OWASP Top 10 vulnerabilities across multiple programming languages

6+ years of relevant experience.

Deep understanding of application architecture and design principles

Experience in design review and threat modelling activities

You are capable of writing exploits for vulnerabilities identified in those respective areas.

Have excellent capabilities to identify security vulnerabilities and perform root cause analysis.