Product Security Lead

CLOUDSCOUTS SOFTWARE SOLUTIONS LLC•Frisco, TX

4d•Remote

About The Position

Candidate will possess deep expertise in secure software development, application security, cloud security, DevSecOps automation, threat modeling, vulnerability management, incident response, and SOC operations. This role will work closely with Engineering, Product Management, DevOps, Infrastructure, and Security teams to build secure products and establish a mature security posture across the organization.

Requirements

10+ Years in Information Security with strong expertise in Product Security, DevSecOps, Security Operations (SecOps), and SOC Operations.
Bachelor's degree in Computer Science, Information Security, or related field.
10+ years of Cybersecurity experience.
5+ years in Product Security or Application Security leadership roles.
Experience managing security teams and cross-functional stakeholders.
Hands-on experience with cloud-native and SaaS environments.

Nice To Haves

CISSP
CSSLP
CCSP
AWS Security Specialty
Azure Security Engineer Associate

Responsibilities

Define and implement product security strategy and roadmap.
Conduct security architecture reviews and threat modeling exercises.
Perform secure design reviews for applications, APIs, microservices, and cloud-native products.
Establish and enforce secure SDLC (SSDLC) practices.
Drive application security assessments including: SAST, DAST, IAST, Software Composition Analysis (SCA), API Security Testing, Penetration Testing.
Review and remediate findings from security assessments.
Establish product security standards aligned with industry frameworks.
Integrate security controls into CI/CD pipelines.
Automate security testing and compliance checks.
Implement security gates and policy enforcement within development workflows.
Support container and Kubernetes security initiatives.
Secure cloud deployments across AWS, Azure, and GCP.
Define Infrastructure-as-Code (IaC) security controls.
Drive secrets management and secure configuration practices.
Lead vulnerability management programs.
Develop risk-based remediation strategies.
Manage security monitoring and incident response activities.
Collaborate with infrastructure and engineering teams for security hardening.
Lead root cause analysis and post-incident reviews.
Maintain security metrics and reporting dashboards.
Oversee SOC monitoring and alert triage processes.
Develop and optimize SIEM detection use cases.
Lead threat hunting initiatives.
Manage incident response lifecycle: Detection, Analysis, Containment, Eradication, Recovery.
Drive EDR/XDR implementation and enhancement activities.
Improve SOC maturity through automation and process optimization.