Product Security Engineer(m/w/x)

Description

As a bridge between security and engineering, you will secure the platform by performing assessments, tuning CI/CD tools, and helping developers build resilient code in a cloud environment.

Requirements

• •Foundation in application security and eagerness to learn
• •Degree in Computer Science, Information Security, or equivalent
• •Experience in Application Security, Product Security, or Software Engineering
• •Understanding of OWASP Top 10 and verification standards
• •Ability to read and review code
• •Experience with Burp Suite or similar tools
• •Optional security certifications like OSCP or GWAPT
• •High empathy for developers and collaborative nature
• •Strong teamwork orientation and preference for collaboration

Tasks

• •Perform security assessments on web and mobile apps
• •Conduct code reviews for APIs and applications
• •Validate security controls using manual and automated testing
• •Triage bug bounty and vulnerability disclosure reports
• •Manage the intake process for external penetration tests
• •Integrate SAST, DAST, and SCA into CI/CD pipelines
• •Tune security tools for high-fidelity developer alerts
• •Participate in threat modeling sessions with product teams
• •Identify architectural flaws during the design phase
• •Advocate for secure coding practices with engineering teams
• •Build secure defaults and libraries in Kotlin and Python
• •Secure infrastructure-as-code and AWS environments

Tools & Technologies

Benefits