Product Security Engineer, Secure Design

Responsibilities

• Threat model application designs and solutions and provide security risk assessments.
• Assess software and network architecture across infrastructure, application, people, and process security layers.
• Collaborate with product managers, designers, and engineers to design secure and resilient systems.
• Identify solution trade-offs and recommend efficient designs that meet functional and security requirements.
• Provide hands-on vulnerability remediation guidance to development teams.
• Champion security culture through developer training, internal CTFs, mentoring, and security best-practice education.
• Help oversee the vulnerability management program and communicate the impact of security events and vulnerabilities to engineers.
• Build security tooling and automation and integrate custom security tools into engineering workflows.
• Drive security-focused architecture, patterns, and processes across engineering.

Requirements

• Experience leading architectural changes or complex cross-team efforts to mitigate security vulnerabilities.
• Ability to clearly communicate security topics and vulnerability classes, including the OWASP Top Ten, and provide actionable direction to product teams.
• Record of partnering empathetically and creatively with internal engineering teams to solve security problems across an entire stack.
• Working knowledge of modern development concepts including virtualized environments, containerization, and continuous integration and delivery.
• Preferred: 3+ years of experience guiding software teams on secure architecture design.
• Preferred: experience building or reviewing threat models and crafting malicious-user, attacker, and abuse or misuse cases.
• Preferred: working knowledge of hardware and software supply-chain security.
• Preferred: familiarity with object-oriented and functional programming concepts, particularly in Go, JavaScript, Rust, or C.

Benefits

• Remote role.
• Reimbursement for relevant conferences, training, and education.
• Access to LinkedIn Learning courses.
• Employee Assistance Program, local employee meetups, and flexible time off policy.
• Potential bonus and equity compensation, including equity grants upon hire and an Employee Stock Purchase Program.