Product Security Engineer, Secure Design

Responsibilities

• Threat model application designs and solutions and provide security risk assessments.
• Provide technical expertise on software and network architecture across infrastructure, application, people, and process security layers.
• Partner with product managers, designers, and engineers to design secure and resilient systems.
• Identify design trade-offs and recommend solutions that meet functional and security requirements.
• Provide hands-on vulnerability remediation guidance to development teams.
• Promote security culture through developer training, internal CTFs, mentoring, and security guidance.
• Help oversee the vulnerability management and security-debt program.
• Build security tooling, architecture patterns, processes, and workflow integrations to scale Product Security practices.

Requirements

• Experience leading architectural changes or complex cross-team efforts to mitigate security vulnerabilities.
• Ability to clearly communicate security topics and vulnerability classes, including the OWASP Top Ten, and provide actionable direction to product teams.
• Experience partnering empathetically with internal engineering teams to address security problems across an entire technology stack.
• Working knowledge of virtualized environments, containerization, and continuous integration and delivery.
• Preferred: 3+ years guiding software teams on secure architecture design.
• Preferred: experience building or reviewing threat models and creating malicious-user, attacker, and abuse or misuse cases.
• Preferred: working knowledge of hardware and software supply-chain security.
• Preferred: familiarity with object-oriented and functional programming concepts, particularly in Go, JavaScript, Rust, or C.

Benefits

• Hybrid work arrangement.
• Reimbursement for relevant conferences, training, and education.
• Access to LinkedIn Learning courses for professional development.
• Employee Assistance Program, local employee meetups, and flexible time off.
• Potential eligibility for performance-based bonuses and equity compensation, including equity grants and an Employee Stock Purchase Program.