Senior Product Security Engineer

HireRight•Nashville, TN

About The Position

As a Senior Product Security Engineer, you will be a strategic partner to our development engineering and product teams, enabling them to build secure software products through collaboration, education, and hands-on support. While you’ll help lead the implementation and tuning of application security tooling (SCA, SAST, secrets detection, container scanning), your long-term impact will come from fostering a culture of secure development and integrating security into every phase of the SDLC. This role balances automation with thoughtful manual engagement - leveraging tools where they’re most effective, and applying targeted reviews such as threat modeling, secure code reviews, and architectural assessments where deeper insight is needed. You’ll use your expertise to guide remediation, influence engineering and architecture decisions, and ensure security is built in, not bolted on. Success in this role requires strong technical depth (significant development experience is a must ) , excellent communication skills, and the ability to work independently while mentoring others. You’ll thrive here if you’re proactive, resourceful, and passionate about enabling teams to build secure and resilient products.

Requirements

5+ years of experience in product or application security.
Strong understanding of secure software development, DevSecOps , and threat modeling.
Prior experience as a software developer or working closely within a development team, with a strong understanding of engineering workflows and developer perspectives
Proficiency in secure code review and vulnerability triage.
Hands-on experience with AppSec tooling (SAST, SCA, secrets detection, container scanning).
Experience with cloud platforms (AWS, GCP, Azure) and developer SaaS tools (GitHub, Jira).
Excellent communication and influencing skills.
Ability to work independently, take initiative, and follow through on deliverables.
Experience mentoring others and leading technical projects.
Proven ability to lead cross-functional teams in a technical capacity, driving complex security initiatives or risk analyses across enterprise environments

Nice To Haves

Experience with Java, C++, .Net , React, Python a plus

Responsibilities

Collaborate with product and engineering teams to integrate security controls at every stage of the software development life cycle.
Partner with developers to explain findings, guide remediation, and promote secure coding practices.
Conduct secure code reviews and participate in architectural discussions from a security standpoint.
Continue to foster a culture of security awareness, including the education and training of developers on secure coding practices.
Communicate effectively with technical and non-technical stakeholders about security concerns and best practices.