Product Security Engineer

Software Guidance & Assistance, Inc. (SGA, Inc.) is searching for a Product Security Engineer for a contract assignment with one of their premier SaaS clients. The role involves managing vulnerability backlogs, partnering with engineering teams, and ensuring risk hygiene through technical security initiatives.

Responsibilities:

• Act as the technical security point-of-contact when partnering directly with engineering product teams
• Strategically prioritize the risk reduction of vulnerabilities
• Drive vulnerabilities to remediation within SLA
• Act as the lead security contact during incidents
• Own metrics and escalations, such as Time-To-Remediation and SLA adherence, to ensure visibility of engineering product team's risk posture
• Identify and implement strategic improvements and paved road solutions to improve resilience

Requirements:

• Over 4 years of experience in vulnerability management
• Vulnerability Management / Triage
• Vulnerability Risk Assessment
• Vulnerability Incident Response
• Knowledge of application security vulnerabilities (OWASP Top 10) and mitigation techniques
• Knowledge of infrastructure vulnerabilities, mitigation techniques, and tooling (e.g. Spotlight Crowdstrike, Rapid7 Nexpose)
• Dependability: Meets commitments, works independently, accepts accountability, handles change, sets personal standards, stays focused under pressure
• Strong understanding of common security concepts that support root-cause analysis to make data-driven decisions on vulnerability patterns and trends
• Ability to speak and communicate professionally