Staff Product Security Engineer

ServiceTitan • US CA Remote, CA

3d • $168,200 - $269,900

About The Position

ServiceTitan is seeking a Staff Product Security Engineer to embed with an engineering portfolio and own its application and cloud security outcomes. The role partners with engineering leaders in planning and design, threat-models systems before they are built, maintains the portfolio’s risk picture, and helps teams adopt secure-by-default architecture and workflows without slowing innovation.

The engineer serves as a security partner to a defined group of squads and engineering leaders. They adapt central security patterns to local architectures, help teams implement and maintain security tooling, provide hands-on remediation support, coach security champions, and bring field learnings back to the central security program. The role also contributes portfolio metrics and supports incident triage and investigation.

Requirements

• 7–10+ years of experience in product security, application security, cloud security, or a closely related security engineering role, with a strong software engineering foundation.
• Ability to work across modern SaaS product security, including secure code review, threat modeling, secure design, CI/CD and supply-chain security, cloud identity and least privilege, IaC security, container and Kubernetes security, and cloud posture management.
• Proficiency reading and writing code in C#/.NET, Go, Java, or Python.
• Hands-on experience with Azure and/or AWS security services and IaC tooling such as Terraform or Bicep.
• Track record of leading threat modeling and architecture reviews at scale and turning results into requirements engineering teams deliver.
• Ability to build trust with VP-level engineering leaders and senior engineers, drive priorities through partnership, and uphold security risks when needed.
• Comfort scripting and automating security tasks and building repeatable patterns.
• Familiarity with securing AI-enabled features and AI coding agents, and with emerging risks involving non-human identities, MCP integrations, and data exposure in AI systems.

Nice To Haves

• Prior experience embedded with or partnering directly with engineering teams.
• C#/.NET proficiency is preferred.
• Certifications such as CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, OSCP, or similar.

Responsibilities

• Participate in portfolio planning and design as a standing member, reviewing roadmaps, architecture proposals, and technical designs early enough to influence them.
• Lead and scale threat modeling across the portfolio, prioritize high-tier systems, coach squads to conduct models, and ensure identified threats become tracked requirements.
• Provide secure architecture guidance for cloud-native services, microservices, multi-tenant data access, identity and secrets handling, and AI-enabled features.
• Maintain an evidence-backed view of portfolio security risks across application findings, cloud posture, identity, and data exposure.
• Partner with portfolio engineering leaders to set remediation priorities, negotiate tradeoffs, drive vulnerability-remediation SLA adherence, and escalate risks appropriately.
• Guide squads through risk acceptance and exception processes, ensuring exceptions are documented, time-bound, and visible to decision makers.
• Adapt central secure service templates, secrets-management patterns, cloud configuration templates, CI/CD guardrails, and IaC policy sets to squad architectures and workflows.
• Drive squad adoption of SAST, SCA, secrets scanning, IaC scanning, container scanning, and CSPM coverage; tune signal quality and distinguish actionable findings from noise.
• Provide hands-on remediation support by reviewing code and Terraform, pairing with engineers, and writing reference implementations or fixes when useful.
• Recruit, coach, and support security champions across the portfolio.
• Deliver contextual training, design reviews, and office hours to help squads learn to fix their own code and configuration.
• Provide engineering context and feedback to the Director and Platform and Programs team, identifying gaps in central tooling, patterns, or standards.
• Contribute portfolio-level metrics and reporting on coverage, remediation velocity, and risk trends to security and engineering leadership.
• Support triage and investigation of security incidents affecting the portfolio and turn lessons learned into design changes and paved-road improvements.

Benefits

• Flexible time off and flexible work arrangements.
• Learning and development opportunities, comprehensive onboarding, leadership training, programs, and events.
• Recognition through Bonusly and peer-nominated awards.
• Company-paid medical, dental, and vision insurance, with 100% employer-paid options and 90% dependent coverage.
• FSA and HSA.
• 401(k) match.
• Telehealth options, including One Medical memberships.
• Parental leave and support.
• Up to $20,000 in fertility services, surrogacy, and adoption reimbursement.
• On-demand maternity support through Maven Maternity and free breast milk shipping through Maven Milk.
• Pet insurance.
• Legal advisory services and financial planning tools.
• Annual bonus and equity.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed