Staff Product Security Engineer

Overview

Staff-level Product Security Engineer providing technical leadership and execution for Delinea's Product Security Program, including secure design reviews, threat modeling, and consulting services.

What you'll do

• Provide strong leadership and be a security thought leader across Delinea's product offerings.
• Gain an understanding of the current product security program state and partner with the team to define future state and multi-year roadmaps.
• Promote strategic direction and influence security architecture adoption in product strategy and roadmap.
• Use knowledge of current product security best practices and industry trends to advise on the secure design of Delinea products and services.
• Perform end-to-end security architecture reviews and leverage AI capabilities to augment the team's capabilities and coverage.
• Perform threat modelling, assess and document product risks and/or application designs.
• Participate in expanding and maturing Delinea's S-SDLC program.
• Stay up to date on the threat landscape, current technologies, security compliance requirements, standards and industry trends.
• Work on key areas to develop baseline cloud, container, application, and infrastructure security standards and integrate them into the CI/CD pipeline.
• Automate operational activities that are part of maintaining product and cloud security infrastructure.
• Respond to and, when appropriate, resolve or escalate security incidents.
• Provide mentorship and guidance to Product Security team members.

What you'll need

• Bachelor's degree in Computer Science, Information Security, similar related field, or equivalent experience.
• Twelve (12) years of professional work experience in Cybersecurity with a minimum of seven years in a Product Security role that includes Security Architecture, Threat Modeling, Secure Design, AppSec tooling, etc.
• Well versed in current Product Security threat landscape and industry best practices.
• Experience performing Threat Modeling and Product Security design reviews and incorporating them as part of SSDLC processes.
• Experience in cloud security, cryptography, secure design reviews and threat modeling, SaaS multi-tenant product architecture, REST APIs, containers (Docker, Kubernetes, or similar), integration of security testing tools into development pipelines.
• Experience with defect tracking (Jira, Bugzilla, ServiceNow, or similar), source code management (ADO, GitLab, GitHub, or similar), and application security testing tools (SAST, DAST, IAST, SCA, or similar).
• Strong leadership, communication, and interpersonal skills, with the ability to influence stakeholders at all levels of the organization.
• Strong analytical skills with the ability to prioritize, manage competing demands, and meet deadlines.
• Strong verbal and written communication skills, with the ability to describe technical security issues in plain language.

Nice to have

• Experience leveraging AI capabilities to automate and augment Product Security tasks such as Threat Modeling and Secure Design reviews.
• Strong understanding of cybersecurity frameworks, risk management principles, and industry standards (e.g., NIST, ISO 27001, CIS, GDPR).
• Solid understanding of cloud security technologies including container security, serverless security, network and application security, and access management.
• Software engineering and/or development experience.
• Cybersecurity certifications (e.g., CISSP, CSSLP, CISM, or similar).
• Proficiency with Azure and AWS.

Details

• Reports to the Sr. Director of Product Security.
• Based in the US, fully remote.
• Delinea is not considering candidates that need any type of US work authorization now or in the future (including F1-OPT, F1-CPT, H-1B, TN, L-1, J1, etc.).