Senior Product Security Engineer
About The Position
Cloud Software Group is seeking a Senior Product Security Engineer to execute the Security Development Lifecycle (SDL) for its on-premises and cloud products, helping ensure that software meets customer expectations for security robustness. The engineer will work with product development teams and provide security guidance, design input, and direction on security practices. The role involves working independently on problems of varied scope and helping drive Product Security strategy within the scope of assigned work. The position focuses on threat modeling, source code review, penetration testing, and security analysis of new and existing products. The engineer will perform targeted, high-impact reviews of C, C++, and C# source code, including with modern AI-assisted tools, and conduct internal penetration tests to identify vulnerabilities. The role also includes guiding development teams on design changes that meet security requirements and applying SSDLC best practices.
Requirements
- Full-time degree in Engineering, preferably in a Computer Science-related field.
- Expertise in at least one security area: Windows or Unix systems, networking, or cryptography.
- Strong C, C++, and C# skills.
- Strong knowledge of Linux and Windows internals, including low-level system architecture.
- Good knowledge of networking, including TCP/IP, HTTP/S, and DNS.
- Basic understanding of file system concepts.
- Experience with object-oriented design concepts.
- Extensive knowledge of common vulnerabilities and ability to explain and remediate OWASP Top 10 vulnerabilities across multiple programming languages.
- At least 6 years of relevant experience.
- Deep understanding of application architecture and design principles.
- Experience with design review and threat modeling activities.
- Ability to write exploits for vulnerabilities in relevant areas.
- Excellent ability to identify security vulnerabilities and perform root cause analysis.
Responsibilities
- Execute the Secure Software Development Lifecycle for Cloud Software Group on-premises and cloud products.
- Guide product development teams on design changes in accordance with security requirements.
- Perform targeted, high-impact source code reviews in C, C++, and C#, using modern AI-assisted tools.
- Conduct internal penetration tests to identify security vulnerabilities.
- Perform threat modeling, design reviews, and security analysis of existing and new products.
- Provide security guidance and input to product engineers.
- Identify security vulnerabilities and perform root cause analysis.
- Write exploits for vulnerabilities identified in relevant areas.
- Drive Product Security strategy within the assigned scope and provide guidance on routine work to support program performance, schedule, and quality standards.
Benefits
- Access to healthcare for U.S.-based employees, typically offered.
- Life insurance for U.S.-based employees, typically offered.
- Disability benefits for U.S.-based employees, typically offered.
- 401(k) plan and company match for U.S.-based employees, typically offered.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
