Staff Product Security Engineer

Role Overview

We are looking for a Senior Product Security Engineer to extend our Product Security capability with a strong focus on continuous vulnerability discovery and prevention. The goal is to ensure that both existing functionality and new changes remain secure over time, and that real vulnerabilities are discovered before customers do.

What You Will Do

Key responsibilities include building and executing security regression testing, driving threat modeling across existing and new functionality, conducting targeted offensive security activities, and identifying real vulnerabilities based on a deep understanding of our platform and the OWASP Top 10 Web Application Security Risks.

Why It Might Be a Fit

The ideal candidate will have 5+ years of experience in Application/Product Security, a strong hands-on experience in web application security testing, API security, threat modeling methodologies, and a deep understanding of OWASP Top 10.

Requirements

• 5+ years in Application/Product Security
• Bachelor's Degree or equivalent of 12 years of work experience
• Strong hands-on experience in web application security testing
• API security
• Threat modeling methodologies
• Deep understanding of OWASP Top 10
• Experience with manual penetration testing
• Security regression testing
• CI/CD security integration
• Ability to identify business logic vulnerabilities
• Strong understanding of authentication, authorization, and session management
• Multi-tenant architectures
• Cloud-native systems

Benefits

• Competitive benefits package