Partner with development teams to improve secure software delivery practices across applications and CI/CD pipelines
Support triage and remediation of application security findings through practical guidance and secure refactoring recommendations
Facilitate threat modelling activities and translate outcomes into actionable improvements and risk reduction measures
Design and maintain secure-by-default delivery patterns, reusable templates, and reference implementations
Support adoption of centrally managed tooling and automated security controls
Develop integrations and automation to enable security validation, audit evidence generation, and operational metrics
Collaborate with platform, architecture, and security teams to improve processes, tooling, and delivery capabilities
Communicate security guidance, standards, and best practices to stakeholders

Experience in application security, software engineering, or product security
Knowledge of application security principles, common vulnerabilities, and secure coding practices across multiple technology stacks
5+ years of application security, software engineering, or product security experience
BS Engineering/Computer Science or equivalent experience required
Understanding of CI/CD security, including pipeline controls, identity and access management, and secrets handling
Experience integrating automated security tooling into software delivery workflows
Experience developing reusable templates, standards, and reference implementations
Familiarity with security automation, compliance support, and audit evidence generation
Awareness of industry security standards and best practices
Strong collaboration, communication, analytical, troubleshooting, and problem-solving skills

Senior Product Security Engineer

Key skills