Product Security Engineer

As our platform continues to scale, security becomes a core product capability rather than a separate function. We're looking for a Product Security Engineer who can partner directly with engineering teams to build secure systems from the ground up.

This is a highly technical, hands-on role where you'll improve the security of our applications, cloud infrastructure, APIs, and development lifecycle.

Responsibilities

Application Security
- Review application architecture and new product features from a security perspective.
- Identify security vulnerabilities across backend services, APIs, mobile applications, and web platforms.
- Perform threat modeling and security design reviews.
- Support internal and external penetration testing activities.

Secure Development
- Build and improve Secure SDLC across engineering teams.
- Integrate security tooling into CI/CD pipelines.
- Improve developer security practices and provide technical guidance.
- Help engineering teams remediate vulnerabilities.

Cloud & Infrastructure Security
- Improve the security posture of our cloud infrastructure.
- Secure Kubernetes environments, IAM policies, secrets management, and infrastructure components.
- Implement security monitoring and hardening best practices.
- Work closely with Platform and DevOps teams.

Security Automation
- Deploy and maintain SAST, DAST, dependency scanning, container scanning, and secret detection.
- Automate security checks and developer workflows.
- Continuously improve security visibility across the engineering organization.