Principal Product Security Engineer
About The Position
The Product Security Engineer - Secure Development Lifecycle is a senior individual contributor responsible for defining, maturing, and integrating Secure Software Development Lifecycle practices across Navy Federal’s software delivery environment. This role serves as the Secure Development Practice integration lead with our Engineering and Technology Services (ETS) organization software delivery teams, ensuring product security expectations are embedded into standard engineering workflows, governance forums, delivery processes, and lifecycle activities. The role will help evolve product security from standalone reviews and manual touchpoints into a scalable, risk-informed, AI powered, and developer-aligned operating model. The individual will partner with Secure Development Practice leaders, ETS, Product Engineering, Architecture, DevSecOps, platform teams, Information Security, governance, and risk stakeholders to define practical integration patterns for secure-by-design delivery. This position will establish repeatable process definitions, ownership models, workflow guidance, control integration points, and adoption measures that improve security outcomes while reducing delivery friction.
Requirements
- Senior individual contributor role.
- Experience in defining, maturing, and integrating Secure Software Development Lifecycle practices.
- Experience in integrating Secure Development Practices with software delivery teams.
- Understanding of embedding product security expectations into engineering workflows, governance, delivery processes, and lifecycle activities.
- Experience in evolving product security models.
- Partnership experience with various stakeholders including Product Engineering, Architecture, DevSecOps, platform teams, Information Security, governance, and risk.
- Experience in defining integration patterns for secure-by-design delivery.
- Experience in establishing repeatable process definitions, ownership models, workflow guidance, control integration points, and adoption measures.
Responsibilities
- Defining, maturing, and integrating Secure Software Development Lifecycle practices across Navy Federal’s software delivery environment.
- Serving as the Secure Development Practice integration lead with ETS organization software delivery teams.
- Ensuring product security expectations are embedded into standard engineering workflows, governance forums, delivery processes, and lifecycle activities.
- Evolving product security from standalone reviews and manual touchpoints into a scalable, risk-informed, AI powered, and developer-aligned operating model.
- Partnering with Secure Development Practice leaders, ETS, Product Engineering, Architecture, DevSecOps, platform teams, Information Security, governance, and risk stakeholders to define practical integration patterns for secure-by-design delivery.
- Establishing repeatable process definitions, ownership models, workflow guidance, control integration points, and adoption measures that improve security outcomes while reducing delivery friction.
Benefits
- Highly competitive pay
- Generous benefits and perks
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
