Staff Product Security Engineer

Staff Product Security Engineer

Location: Sunrise, FL or Lowell, MA

Work Arrangement: Hybrid – onsite Tuesday, Wednesday, and Thursday; remote Monday and Friday

Schedule: Monday–Friday, 8:00 AM–5:00 PM ET

Duration: 6-month contract, with potential for extension

Position Overview

We are seeking a highly experienced Staff Product Security Engineer to partner closely with Security and Engineering teams to evaluate, strengthen, and guide the security of applications and products throughout the development lifecycle.

This individual will bring strong hands-on security engineering experience, the ability to analyze application and system architectures, identify security risks, and provide practical recommendations to engineering teams on how to address vulnerabilities and security challenges.

The primary focus will be on application and product security, including reviewing solutions currently being developed, evaluating security architecture and design decisions, and helping ensure security is incorporated into the development and deployment lifecycle.

The ideal candidate is technically hands-on, comfortable working with engineering teams and vendors, and knowledgeable about modern SaaS platforms, development tools, deployment technologies, and emerging AI-enabled capabilities.

Key Responsibilities

• Partner with Security and Engineering teams to assess application and product security requirements, architecture, and design.
• Review applications, platforms, and solutions currently under development to identify security gaps, vulnerabilities, and potential risks.
• Analyze technical architectures and provide guidance to engineering teams on security risks, mitigation strategies, and appropriate remediation.
• Provide hands-on security engineering support and practical recommendations throughout the software development lifecycle.
• Evaluate security controls within SaaS applications, development platforms, deployment tools, and engineering environments.
• Help integrate security practices into application design, development, testing, and deployment processes.
• Identify weaknesses in application security architecture and guide teams toward secure design and implementation.
• Work with internal stakeholders and external vendors to evaluate security capabilities, product integrations, and emerging technologies.
• Assess security implications of AI-enabled tools and vendor platforms, including potential risks associated with AI capabilities.
• Communicate technical security findings, risks, and recommended actions to both engineering teams and security leadership.
• Support cybersecurity assessments and integration activities related to mergers and acquisitions, as needed.

Required Qualifications

• Approximately 7+ years of experience in security engineering , product security, application security, or a closely related technical security discipline.
• Strong understanding of application security principles, security architecture, and common security challenges within software engineering environments.
• Hands-on experience identifying security risks, evaluating technical architectures, and recommending practical remediation strategies.
• Experience partnering directly with software developers, engineering teams, and security stakeholders.
• Familiarity with SaaS platforms, software development tools, deployment technologies, and tools used throughout the software development lifecycle.
• Ability to assess security controls and identify gaps in applications and systems.
• Strong technical problem-solving skills and the ability to translate security findings into actionable engineering guidance.
• Excellent communication skills and the ability to influence technical teams without relying solely on formal authority.

Preferred Qualifications

• Experience with Product Security or Application Security Engineering.
• Experience securing modern SaaS applications and cloud-based platforms.
• Familiarity with DevSecOps, CI/CD pipelines, application security testing, and secure software development practices.
• Exposure to AI-enabled applications, AI security considerations, or security risks associated with third-party AI capabilities.
• Experience evaluating third-party vendors and their security architecture or product capabilities.
• Experience with cybersecurity due diligence, mergers and acquisitions, or post-acquisition security integration is a plus.
• Relevant security certifications are beneficial but not required.

Ideal Candidate

The ideal candidate is a hands-on security engineer who understands how software and applications are built, can recognize security challenges within an architecture, and knows how to guide engineering teams toward practical solutions.

This person should be comfortable reviewing products and applications under development, working across Security and Engineering, evaluating SaaS and development tools, and helping embed security throughout the product development lifecycle.

M&A experience is beneficial, but the primary priority is strong security engineering and product/application security expertise.