Senior Product Security Engineer

The Opportunity The Adobe Security Engineering Partnerships (SEP) team is seeking a Senior Product Security Engineer to scale security capabilities across our software Supply Chain, Kubernetes deployment environments, and cloud-native systems. We're looking for a candidate that is passionate about securing the software development lifecycle (SDLC), strengthening software supply chain integrity, and embedding security into modern delivery pipelines using automation-first, secure-by-default approaches. You will operate as a security expert, influencing engineering organizations and key stakeholders, designing scalable security solutions, and independently managing risk across complex, cloud-native systems. What you’ll Do Develop and implement security controls across CI/CD platforms including GitHub Actions workflows, Jenkins, and other internal build systems. Establish secure-by-default pipeline standards covering build isolation, artifact integrity, secrets management, and least-privilege access. Identify systemic software supply chain risks, design scalable mitigations, and drive adoption of them to prevent entire classes of vulnerabilities. Secure Kubernetes-based deployment platforms across multi-cloud environments. Define security baselines for Kubernetes clusters, workloads, container runtimes, admission controls, and network segmentation. Perform security architecture reviews for complex CI/CD, cloud, and Kubernetes environments. Independently manage security risk by making defensible, risk-based decisions balancing business velocity and security posture. Recognize capability gaps and design new security solutions that increase coverage and effectiveness across multiple product areas. Serve as a trusted security advisor and technical lead within your domain. Establish yourself as a domain expert in CI/CD, supply chain, and cloud security. What you need to succeed Bachelor’s degree in Computer Science, Engineering, or related field of study. 6+ years of experience in Product Security, Application Security, Cloud Security, or a related field. Experience threat modeling for CI/CD and cloud-native systems. Deep expertise in CI/CD systems such as GitHub Actions, Jenkins, GitLab CI, or similar platforms. Strong experience securing Kubernetes and containerized workloads in cloud-native environments. Hands-on knowledge of software supply chain security, artifact signing, and open-source risk management. Experience implementing GitOps workflows and securing infrastructure-as-code (Terraform, CloudFormation, etc.). Strong programming or scripting ability (e.g., Python, Go, Bash) with experience building automation and security tooling. Demonstrated ability to identify systemic risks and design scalable, automation-first mitigations. Strong understanding of Secure SDLC practices and how security solutions reduce risk across large organizations. Proven ability to influence engineering teams and serve as a technical leader without formal management authority. Expected Pay Range Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay range for this position is $144,800 – $261,450 annually. Pay within this range varies by work location and may also depend on job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for the job location during the hiring process. In California, the pay range for this position is $180,600 – $261,450. In New York, the pay range for this position is $180,600 – $261,450. In Colorado, the pay range for this position is $161,700 – $234,150. Adobe is proud to be an Equal Employment Opportunity employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other protected characteristic. State-Specific Notices California: Adobe will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and fair‑chance ordinances. Colorado: The application window will remain open until at least the date and time stated above in Pacific Time, in compliance with Colorado pay transparency regulations. If this role does not have Colorado listed as a hiring location, no specific application window applies, and the posting may close at any time based on hiring needs. Massachusetts: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. #J-18808-Ljbffr Adobe Inc.