Product Security Engineer

Overview

Product Security Engineer responsible for embedding security into the product development lifecycle and partnering with engineering teams to identify, test, analyze, and remediate security risks.

What you'll do

• Integrate security practices into the SDLC from design through release.
• Perform security reviews of architecture, source code, APIs, and software components.
• Conduct security testing including SAST, SCA, DAST/API testing, fuzz testing, and penetration testing.
• Assess vulnerabilities, triage and reproduce issues, prioritize remediation, and validate fixes.
• Develop security test cases and automation to improve security testing coverage.
• Support secure coding practices and security controls within CI/CD pipelines.
• Support threat modeling, security risk assessments, SBOM generation/maintenance, and vulnerability remediation processes.

What you'll need

• 5+ years of experience in software development, application security, or product security.
• Hands-on experience in at least one programming language (C/C++, Java, Python, or JavaScript).
• Good understanding of SDLC and testing methodologies.
• Ability to read and understand source code and work with developers on remediation.
• Experience with security testing tools such as SAST, SCA, DAST, vulnerability scanners, fuzzing, and penetration-testing tools.
• Understanding of common application/product security vulnerabilities (e.g., OWASP Top 10, CWE).
• Experience with Git, CI/CD pipelines, and DevSecOps practices.

Details

• Maintain product security evidence and documentation for regulatory compliance, including EU Cyber Resilience Act (CRA) requirements.