Staff Product Security Engineer

Responsibilities

• Create and build security controls that enable the organization to scale securely.
• Design and deliver security improvements across applications, software, and services.
• Develop and operationalize detection strategies and incident-response workflows.
• Build and enhance secure systems through integration, testing, operations, and maintenance.
• Analyze endpoint, network, and cloud telemetry to identify, investigate, and mitigate threats.
• Design, implement, and maintain cybersecurity infrastructure that improves organizational resilience.
• Investigate, contain, and respond to cybersecurity incidents.
• Identify vulnerabilities, configuration issues, and remediation opportunities across systems and networks.
• Collect and analyze threat intelligence and forensic evidence.
• Conduct defensive operations, tactical forensics, and threat hunting.
• Partner with Infrastructure, Product, and Engineering teams to embed security into applications, software, and services.

Requirements

• 8+ years of experience in security engineering or incident response within a technology company.
• In-depth expertise with at least one major cloud platform.
• Strong knowledge of common software development tools and infrastructure, including CI/CD tooling and pipelines.
• Comprehensive understanding of attacker tools and techniques, their detection and prevention, and high-quality incident investigation and response.
• Strong communication skills for explaining technical security and software concepts to non-technical audiences.
• Ability to solve complex challenges in high-growth startup environments and learn new skills.
• Preferred qualifications include a bachelor’s degree in Cybersecurity, Computer Science, or a similar field; recognized cybersecurity training or certifications such as OSCP, GIAC, or CEH; strong Splunk and security monitoring experience; DevOps/SRE experience with Kubernetes; GCP or Alibaba Cloud experience; Okta, GSuite, and cloud VPN experience; Python and Java/Kotlin experience; and published cybersecurity articles, journals, or blogs.