Principal Engineer, Product Security(m/w/x)

Description

You will lead the company's product security strategy by embedding advanced security practices into the development lifecycle and empowering engineering teams to build resilient, cloud-native services.

Requirements

• •Technical background and 5+ years Product Security
• •2+ years Product Security leadership experience
• •Customer-facing security and roadmap influence experience
• •Experience in scale-up environments
• •Expertise in formulating requirements and priorities
• •Secure Architecture design and Threat Modeling
• •Experience infusing security into the SDLC
• •Static Analysis and Secure Code Review
• •Knowledge of Linux, Kubernetes, and Terraform
• •DevSecOps experience and scripting proficiency
• •Project management experience for cross-team projects
• •Experience in Agile environments
• •Experience running trainings or onboardings
• •Fluent written and verbal English communication
• •Curiosity and aptitude for AI tools
• •Security Certifications like CISSP or CCSP
• •Eagerness to improve and learn

Tasks

• •Formulate and drive the product security strategy
• •Assess and improve the security maturity posture
• •Create standardized security architecture and operational practices
• •Track and drive remediation of technology risks
• •Educate teams on risk assessments and threat modeling
• •Build secure api-first applications with product teams
• •Review designs to address security shortcomings
• •Embed security tooling into the development process
• •Prioritize fixes from external penetration tests
• •Collaborate with product teams to resolve security issues
• •Lead customer conversations regarding product security
• •Triage and investigate new attack vectors
• •Drive security initiatives and support certification audits
• •Partner with Product Management and legal teams
• •Identify skills gaps and facilitate knowledge sharing

Tools & Technologies

Benefits