Product Security Engineer 3

Cedar

2h • $157,250 - $198,875

About The Position

Cedar is seeking a Product Security Engineer who approaches security as an engineering discipline. The role focuses on writing code, building infrastructure, and shipping internal products that make secure practices easier for developers. The engineer partners with product teams to help them deliver features safely and efficiently, addressing high-risk workflows across products, infrastructure, and integrations.

The role includes developing security tools and automation, collaborating with product engineers to incorporate security during design, reviewing infrastructure-as-code and IAM roles, and helping teams scope and implement vulnerability fixes in light of both risk and business context. Cedar values pragmatic communication, proactive systemic solutions, collaboration, and responsible use of AI tools.

The position is equity eligible and includes a competitive benefits and wellness package. Most roles offer flexibility to work from home or in the office, depending on what works best for the employee. Applicants must be currently authorized to work in the United States on a full-time basis.

Requirements

• Substantial software development experience and comfort writing production-ready code; Cedar uses Python and Go but welcomes other backgrounds.
• Ability to weigh security risks against business goals and communicate trade-offs effectively to non-security stakeholders.
• Proactive approach to identifying vulnerability patterns and building systemic solutions.
• Deep familiarity with AWS infrastructure best practices, IAM, and containerization.
• Collaborative, teaching-oriented approach to enabling software developers.
• Active use of AI tools for beneficial team support, security research and analysis, and responsible AI practices.
• Currently authorized to work in the United States on a full-time basis.

Nice To Haves

• Experience creating developer-focused security libraries or CLI tools.
• Familiarity with HIPAA, PCI, or securing fintech/payment data.
• Participation in CTFs, bug bounties, or open-source security contributions.

Responsibilities

• Build security tooling and automation using technologies such as Terraform, Bash, Go, or Python, and interfaces such as gRPC, GraphQL, and HTTP.
• Pair with product engineers to co-design features and incorporate security at the design stage.
• Review Terraform infrastructure-as-code and IAM roles, providing code-ready improvements that help educate developers and streamline deployments.
• Advise teams on vulnerabilities and help scope fixes based on pragmatic assessment of risk and business context.
• Identify patterns in vulnerabilities and build systemic fixes or libraries to prevent classes of bugs.
• Use AI tools to support teammates, improve security research and analysis, and promote responsible AI use.

Benefits

• Equity eligibility.
• Competitive benefits and wellness package.
• Flexible work-from-home or office arrangements for most roles.
• Unlimited PTO for exempt employees, including vacation, sick, and mental health days; employees are encouraged to take at least 20 vacation days per year.
• 16 weeks of paid parental leave with health benefits for all parents, plus flexible re-entry schedules.
• Diversity initiatives and employee resource groups.
• Competitive pay and health benefits, including fertility and adoption assistance.
• 401(k) matching: Cedar matches 100% of contributions up to 3% of annual compensation.
• Hands-on mentorship, employee and management coaching, and a team discretionary budget for learning and development resources.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed