Threat model application designs and solutions and provide security risk assessments (60%)
Collaborate with product managers, designers, and engineers to threat model and architect secure and resilient systems.
Provide hands-on remediation guidance to development teams.
Build secure-by-default guardrails for engineers (30%)
Design and build internal tooling to provide engineering teams with secure-by-default configurations and libraries.
Write robust, resilient, and maintainable software, primarily in Go and Python.
Cultivate and promote a security culture (10%)
Champion an internal security culture (developer training, internal CTFs, etc.).
Mentor software engineering teams in security best practices.

6+ years experience guiding software teams on secure architecture design.
5+ years of experience in software engineering projects, ideally with a security focus.
Strong knowledge of modern development concepts (virtualized environments, containerization, continuous integration + delivery).
Ability to clearly communicate security topics and vulnerability classes (e.g. OWASP Top Ten) and ability to provide actionable direction to product teams.
A record of partnering with internal engineering teams to tackle security problems across an entire stack with empathy and creativity.

Staff Product Security Engineer

Key skills