Senior Product Security Engineer
About The Position
The Senior Product Security Engineer executes the Security Development Lifecycle (SDL) and Secure Software Development Lifecycle (SSDLC) for Cloud Software Group’s on-premises and cloud products, helping ensure they meet customer expectations for security robustness. The role collaborates with product engineering teams, provides security guidance, and recommends design changes to meet security requirements. It includes security analysis of existing and new products, threat modeling, targeted source code reviews, and internal penetration testing. The engineer works independently on problems of varied scope and helps drive product security strategy within their area while providing guidance on routine work to support program performance, schedules, and quality standards.
Requirements
- Full-time degree in Engineering, preferably in a Computer Science-related field.
- Expertise in at least one security area: Windows or Unix systems, networking, or cryptography.
- Strong C, C++, and C# skills.
- Strong Linux and Windows internals knowledge, including low-level system architecture.
- Good knowledge of networking, including TCP/IP, and protocols such as HTTP/S and DNS.
- Basic understanding of file system concepts.
- Experience with object-oriented design concepts.
- Extensive knowledge of common vulnerabilities and the ability to explain and remediate OWASP Top 10 vulnerabilities across multiple programming languages.
- At least 6 years of relevant experience.
- Deep understanding of application architecture and design principles.
- Experience with design reviews and threat modeling.
- Ability to write exploits for vulnerabilities identified in the relevant areas.
- Excellent ability to identify security vulnerabilities and perform root cause analysis.
Responsibilities
- Execute the Security Development Lifecycle (SDL) and Secure Software Development Lifecycle (SSDLC) for on-premises and cloud products.
- Guide product development teams on design changes needed to meet security requirements.
- Perform targeted, high-impact source code reviews of C, C++, and C# code, using modern AI-assisted tools.
- Conduct internal penetration tests to identify security vulnerabilities.
- Perform threat modeling and design reviews.
- Analyze existing and new products for security issues and provide security guidance and input to product engineers.
- Drive product security strategy within a limited scope and provide general guidance or direction on routine work.
Benefits
- U.S.-based employees are typically offered access to healthcare, life insurance, and disability benefits.
- 401(k) plan and company match.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
